--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-24T04:03:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89463b89-ccc5-4b78-b636-0175e5a61a82","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6"} {"level":"info","ts":"2026-07-24T04:03:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d"} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6"} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d"} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e"} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"error","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"debug","ts":"2026-07-24T04:03:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"info","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56206","PortSpecifier":{"PortValue":56206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56206","PortSpecifier":{"PortValue":56206}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865805,"nanos":302285274},"http":{"id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/auth-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d2cedc8-bd42-429b-a397-4465b949bd8f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44968","PortSpecifier":{"PortValue":44968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1bfe26f-20a5-467e-ab1a-135335515be9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44968","PortSpecifier":{"PortValue":44968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865805,"nanos":363813832},"http":{"id":"d1bfe26f-20a5-467e-ab1a-135335515be9","method":"POST","headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f701e0/auth-test-model-f701e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f701e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1bfe26f-20a5-467e-ab1a-135335515be9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44978","PortSpecifier":{"PortValue":44978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3804e2bb-43a9-420a-a1da-ba820cc93327","method":"GET","path":"/maas-api/v1/api-keys/b5a567fb-efc9-4b92-8335-e7164b84cb0a","host":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44978","PortSpecifier":{"PortValue":44978}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865805,"nanos":409322057},"http":{"id":"3804e2bb-43a9-420a-a1da-ba820cc93327","method":"GET","headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b5a567fb-efc9-4b92-8335-e7164b84cb0a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b5a567fb-efc9-4b92-8335-e7164b84cb0a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f701e0/auth-test-model-f701e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f701e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3804e2bb-43a9-420a-a1da-ba820cc93327","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56f99208-f1c2-477d-9858-43d576903ae8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56210","PortSpecifier":{"PortValue":56210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56f99208-f1c2-477d-9858-43d576903ae8","method":"GET","path":"/maas-api/v1/api-keys/b5a567fb-efc9-4b92-8335-e7164b84cb0a","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56f99208-f1c2-477d-9858-43d576903ae8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:56210","PortSpecifier":{"PortValue":56210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865805,"nanos":448552753},"http":{"id":"56f99208-f1c2-477d-9858-43d576903ae8","method":"GET","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b5a567fb-efc9-4b92-8335-e7164b84cb0a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56f99208-f1c2-477d-9858-43d576903ae8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56f99208-f1c2-477d-9858-43d576903ae8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56f99208-f1c2-477d-9858-43d576903ae8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b5a567fb-efc9-4b92-8335-e7164b84cb0a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f99208-f1c2-477d-9858-43d576903ae8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f99208-f1c2-477d-9858-43d576903ae8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56f99208-f1c2-477d-9858-43d576903ae8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/auth-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56f99208-f1c2-477d-9858-43d576903ae8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f99208-f1c2-477d-9858-43d576903ae8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56f99208-f1c2-477d-9858-43d576903ae8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56f99208-f1c2-477d-9858-43d576903ae8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:03:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56f99208-f1c2-477d-9858-43d576903ae8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:03:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T04:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"} {"level":"error","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:03:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:03:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"info","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:41656","PortSpecifier":{"PortValue":41656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:41656","PortSpecifier":{"PortValue":41656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865826,"nanos":799552928},"http":{"id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/auth-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"564df2f3-df2e-44ef-b32e-f4dc8a9d01de","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:38038","PortSpecifier":{"PortValue":38038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:38038","PortSpecifier":{"PortValue":38038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865826,"nanos":835947683},"http":{"id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","method":"POST","headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f701e0/auth-test-model-f701e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f701e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8e89f23a-b7cb-4f7f-a009-edfa650511e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:41658","PortSpecifier":{"PortValue":41658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:41658","PortSpecifier":{"PortValue":41658}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865826,"nanos":875242927},"http":{"id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1165YgL9K5ebJehxh_uwlTAdzKlJD37jkRgbn5nRke6ltmJr27m7BwfD9Fg2V"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1165YgL9K5ebJehxh_uwlTAdzKlJD37jkRgbn5nRke6ltmJr27m7BwfD9Fg2V\"}"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"47409636-62a3-4174-93f0-5be333ba6425","keyName":"e2e-auth-iso-a-43afc8","subscription":"e2e-auth-iso-81376a","tenant":"e2e-shared-a-5b56b9","userId":"47409636-62a3-4174-93f0-5be333ba6425","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/auth-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-81376a"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:03:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1644ba8-2b69-4623-8799-c5a6ce5ea9fd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:03:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"} {"level":"info","ts":"2026-07-24T04:03:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e475ef60d9dc7d2c3dd5fc658088936e7000a66a4d81c06debfbf16baafe2d1"} {"level":"info","ts":"2026-07-24T04:03:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8fb8fa86a8a59888aab75f31511922ed363442f42409beae19c92f3bc94cef7"} {"level":"info","ts":"2026-07-24T04:03:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4"} {"level":"info","ts":"2026-07-24T04:03:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f6b65ecf1db1e1e5c5ca98255e03df8aa11cd32cef1cd56b090ed15b1a06f9e"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/207073044a4b166b079fcebe9ccb97aaebbc43b8ceda0eb0422bee0428f183d8"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/155a8d7fecc5f367e0a36850704e24186075bf3ca9c74295aae18f7e628c25ac"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b2f92b5656cafc8808866123e32925682a3ff76189eff69df4faa99e45c60ce"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bcf502232c5345c3bc606f8dd623e60b5b4ea101895bd4a703eff3a3bb97d1d"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef0fa4eee89df7e8e6b0686fed2c45cd0006818623f22aa959e8a5c01aecd5ba"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e5f0b17cf995f56a82a5e02736a8a9c0ec8122b04bc7e8bad491b140374b10c"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5988e72e1b2cf96a793ccc9bd19914c1acaec9541b2b21e9bde4cd13fe68327"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/404bf3cae3280bd4444db9ff98d12961b049a6a9729025e6ace3b0e2873ca640"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77cc0a8730b10e67402969672573501ab10ebf1adc76c5a02e37eaa68cb52453"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d536579dc4bdb891da28e1da4c9c7a2ddb550914ef92b97326779a78d5fa107"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a409ead48029264268d878383b192084f5202d53dad8bfdc232e054f7efceb6"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d542730655672596d69c629bd5db642eb28516e18becfdf62f8d917593e413c2"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2c4b6dc0abdc6fd3423f77d51be3a62f70d5369dc1a6bcbb8c53efbd4965547d"} {"level":"info","ts":"2026-07-24T04:03:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac"} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac"} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac"} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9acb022351905fd85d5d57cec180683b6b43320040168b02df51cdab2641d258"} {"level":"info","ts":"2026-07-24T04:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3444260823d72f37aa2f69bf60f8b2b8ef1cc5c3de29f06ab21d21039dd62a"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773822aac0c4526c1f0e8789e4a6368f8fb74be17d8419090e9b38365b6fc83b"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9acb022351905fd85d5d57cec180683b6b43320040168b02df51cdab2641d258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9acb022351905fd85d5d57cec180683b6b43320040168b02df51cdab2641d258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9acb022351905fd85d5d57cec180683b6b43320040168b02df51cdab2641d258","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed3444260823d72f37aa2f69bf60f8b2b8ef1cc5c3de29f06ab21d21039dd62a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed3444260823d72f37aa2f69bf60f8b2b8ef1cc5c3de29f06ab21d21039dd62a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9acb022351905fd85d5d57cec180683b6b43320040168b02df51cdab2641d258"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62d1a55200052dcf8b946bee7aa18ce1367928d9fb11a11142a21fb6c158a210"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed3444260823d72f37aa2f69bf60f8b2b8ef1cc5c3de29f06ab21d21039dd62a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"773822aac0c4526c1f0e8789e4a6368f8fb74be17d8419090e9b38365b6fc83b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["773822aac0c4526c1f0e8789e4a6368f8fb74be17d8419090e9b38365b6fc83b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"773822aac0c4526c1f0e8789e4a6368f8fb74be17d8419090e9b38365b6fc83b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed3444260823d72f37aa2f69bf60f8b2b8ef1cc5c3de29f06ab21d21039dd62a"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/773822aac0c4526c1f0e8789e4a6368f8fb74be17d8419090e9b38365b6fc83b"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9acb022351905fd85d5d57cec180683b6b43320040168b02df51cdab2641d258","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62d1a55200052dcf8b946bee7aa18ce1367928d9fb11a11142a21fb6c158a210","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:04:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62d1a55200052dcf8b946bee7aa18ce1367928d9fb11a11142a21fb6c158a210"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe"} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62d1a55200052dcf8b946bee7aa18ce1367928d9fb11a11142a21fb6c158a210","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed3444260823d72f37aa2f69bf60f8b2b8ef1cc5c3de29f06ab21d21039dd62a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"773822aac0c4526c1f0e8789e4a6368f8fb74be17d8419090e9b38365b6fc83b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62d1a55200052dcf8b946bee7aa18ce1367928d9fb11a11142a21fb6c158a210","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:04:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62d1a55200052dcf8b946bee7aa18ce1367928d9fb11a11142a21fb6c158a210"} {"level":"info","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44458","PortSpecifier":{"PortValue":44458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44458","PortSpecifier":{"PortValue":44458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865892,"nanos":547341521},"http":{"id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/sub-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7bf5077-f4b2-4b5c-8c8f-849bfcf7d9b5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:50996","PortSpecifier":{"PortValue":50996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a3957cd9-de60-44da-8cf3-0778fea62989","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:50996","PortSpecifier":{"PortValue":50996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865892,"nanos":587667930},"http":{"id":"a3957cd9-de60-44da-8cf3-0778fea62989","method":"POST","headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f701e0/sub-test-model-f701e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f701e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a3957cd9-de60-44da-8cf3-0778fea62989","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44464","PortSpecifier":{"PortValue":44464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:44464","PortSpecifier":{"PortValue":44464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865892,"nanos":627508252},"http":{"id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","method":"GET","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-MncMYB3Jl2HtdThF_QJAT0pqPN4lg1LbvhaHctmGIpJWRfPzjSycHYO4xWSI"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-MncMYB3Jl2HtdThF_QJAT0pqPN4lg1LbvhaHctmGIpJWRfPzjSycHYO4xWSI\"}"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6cd49f75-bcca-4cf8-b914-116ce7a1cd14","keyName":"e2e-sub-iso-107d2a","subscription":"e2e-a-only-b0eec8","tenant":"e2e-shared-a-5b56b9","userId":"6cd49f75-bcca-4cf8-b914-116ce7a1cd14","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/sub-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b0eec8"} {"level":"info","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5213447-bd1d-4eb6-886b-40fc7cf444c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51006","PortSpecifier":{"PortValue":51006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51006","PortSpecifier":{"PortValue":51006}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865892,"nanos":670425702},"http":{"id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","method":"GET","headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-QHonOaj04bTVgAeQ_HVTXVw3M2YUfSyb2a1tpJ121haKB1YlWjxaN4SgOdSy"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f701e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-QHonOaj04bTVgAeQ_HVTXVw3M2YUfSyb2a1tpJ121haKB1YlWjxaN4SgOdSy\"}"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f701e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0b979a24-8e14-4b80-b102-e08574fd3ccc","keyName":"e2e-sub-iso-8490dc","subscription":"e2e-b-only-b0eec8","tenant":"e2e-shared-b-f701e0","userId":"0b979a24-8e14-4b80-b102-e08574fd3ccc","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f701e0/sub-test-model-f701e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f701e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b0eec8"} {"level":"info","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:04:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bdb23c83-19fc-4e30-a637-bbf7e84250cf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"} {"level":"info","ts":"2026-07-24T04:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"} {"level":"info","ts":"2026-07-24T04:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c"} {"level":"info","ts":"2026-07-24T04:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe"} {"level":"info","ts":"2026-07-24T04:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:04:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"info","ts":"2026-07-24T04:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"} {"level":"info","ts":"2026-07-24T04:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:04:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c"} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe"} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe"} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe"} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:05:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe"} {"level":"info","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dc69260-4776-46c8-be46-f3f877db239e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:43014","PortSpecifier":{"PortValue":43014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9dc69260-4776-46c8-be46-f3f877db239e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9dc69260-4776-46c8-be46-f3f877db239e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:43014","PortSpecifier":{"PortValue":43014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865911,"nanos":129761194},"http":{"id":"9dc69260-4776-46c8-be46-f3f877db239e","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9dc69260-4776-46c8-be46-f3f877db239e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9dc69260-4776-46c8-be46-f3f877db239e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9dc69260-4776-46c8-be46-f3f877db239e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dc69260-4776-46c8-be46-f3f877db239e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dc69260-4776-46c8-be46-f3f877db239e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9dc69260-4776-46c8-be46-f3f877db239e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/sub-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9dc69260-4776-46c8-be46-f3f877db239e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dc69260-4776-46c8-be46-f3f877db239e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9dc69260-4776-46c8-be46-f3f877db239e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dc69260-4776-46c8-be46-f3f877db239e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9dc69260-4776-46c8-be46-f3f877db239e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:49582","PortSpecifier":{"PortValue":49582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:49582","PortSpecifier":{"PortValue":49582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865911,"nanos":168231365},"http":{"id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","method":"POST","headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f701e0/sub-test-model-f701e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f701e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46840170-9a49-42e9-a1ef-a7bc0d6f1017","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:43020","PortSpecifier":{"PortValue":43020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5448f448-2fbe-4373-8355-3e93fee38e28","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:43020","PortSpecifier":{"PortValue":43020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865911,"nanos":211698586},"http":{"id":"5448f448-2fbe-4373-8355-3e93fee38e28","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SEWL9yc0BG12gaN1_GqenNzqxL0n7UrLJi8638L4uOnWSJHEw5jNKoOy6KEg"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SEWL9yc0BG12gaN1_GqenNzqxL0n7UrLJi8638L4uOnWSJHEw5jNKoOy6KEg\"}"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"555e44a6-07e4-4ef2-b6ee-781ea31c3e54","keyName":"e2e-sub-iso-e6587a","subscription":"e2e-shared-sub-6fd9a7","tenant":"e2e-shared-a-5b56b9","userId":"555e44a6-07e4-4ef2-b6ee-781ea31c3e54","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/sub-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-6fd9a7"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5448f448-2fbe-4373-8355-3e93fee38e28","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:49590","PortSpecifier":{"PortValue":49590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:49590","PortSpecifier":{"PortValue":49590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865911,"nanos":239376556},"http":{"id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","method":"POST","headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11pvt9hu4WBvrWCLy_4fqWytFeIJkYBjMambJdTJhEgZ7COHngIabOAEEL5V6"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f701e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11pvt9hu4WBvrWCLy_4fqWytFeIJkYBjMambJdTJhEgZ7COHngIabOAEEL5V6\"}"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f701e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"027050fb-20c1-49d7-9da8-908beeb9056f","keyName":"e2e-sub-iso-184bfe","subscription":"e2e-shared-sub-6fd9a7","tenant":"e2e-shared-b-f701e0","userId":"027050fb-20c1-49d7-9da8-908beeb9056f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f701e0/sub-test-model-f701e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f701e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-6fd9a7"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:05:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba3c9d5a-0e22-4bb6-87cd-f75526d69502","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7257da0e8d10a703a2c09eab71cb925841d166cfe1a07ece7e8476fef73f9108"} {"level":"info","ts":"2026-07-24T04:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f320060627003df588e05d2dbd48b319574538ace190949dc246ac7815f2efac"} {"level":"info","ts":"2026-07-24T04:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c52acc21027ed52894685dd3bdf2d4d3109d38ef35d98270672abdeda61f8ab"} {"level":"info","ts":"2026-07-24T04:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48"} {"level":"info","ts":"2026-07-24T04:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4"} {"level":"info","ts":"2026-07-24T04:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed3444260823d72f37aa2f69bf60f8b2b8ef1cc5c3de29f06ab21d21039dd62a"} {"level":"info","ts":"2026-07-24T04:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69a266166a9bc6f1dbfe24bac67a3295f773d11537785d35c8d1475c6a7e50fe"} {"level":"info","ts":"2026-07-24T04:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e391ae1ce71d71bf6a1c28fe94f5007f6e3f0352343d3b76dcba7c335c48e03e"} {"level":"info","ts":"2026-07-24T04:05:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a56bfb7fb410ed3c6c5bf266fda5af80133919001265b1900d96f0cb402398c"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/773822aac0c4526c1f0e8789e4a6368f8fb74be17d8419090e9b38365b6fc83b"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8923118afe3049d05e0aabaf2a8df252e7def9f58d521c053fdd62d513fd6c97"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62d1a55200052dcf8b946bee7aa18ce1367928d9fb11a11142a21fb6c158a210"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e4d9873a09e772bfbcc5ffab58957767184cc56f6ff896a1bd5fd0904a24d70"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9acb022351905fd85d5d57cec180683b6b43320040168b02df51cdab2641d258"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c65ee923f88c46be3fd51238ec95cda53d3848e97878684378efa125e46dec2f"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54600e47cf00e05fe425f3f4e1b28246796abddf728fc6d733ca444ca4a6dfee"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/983d9c0bdc4a3bd1012a8335c1268a969dd551d0f862831c7c0c24d5bce2af80"} {"level":"info","ts":"2026-07-24T04:05:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/777f19f90a35f1c01667dbdcd58f80b54a7b9ad0103fe22adf8c64db631501a7"} {"level":"debug","ts":"2026-07-24T04:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:05:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:05:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61"} {"level":"info","ts":"2026-07-24T04:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:05:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fb50e4e0ae72e675f545c5fbd4327fd369d2aa371bdc4644c5ff6790ffdc2e"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38fb50e4e0ae72e675f545c5fbd4327fd369d2aa371bdc4644c5ff6790ffdc2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38fb50e4e0ae72e675f545c5fbd4327fd369d2aa371bdc4644c5ff6790ffdc2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41168d042e99f82af8dbaa62f823e13e38ddf8fa442f085f0a015d34f3bad97"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38fb50e4e0ae72e675f545c5fbd4327fd369d2aa371bdc4644c5ff6790ffdc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786ccaa38f5d875803255d078ace7ed3a99fffbf01c06e322520d14d4be71532"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e41168d042e99f82af8dbaa62f823e13e38ddf8fa442f085f0a015d34f3bad97","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e41168d042e99f82af8dbaa62f823e13e38ddf8fa442f085f0a015d34f3bad97"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b15ae18e47ce27353ded1886aa4cc0257047a5bf1f8265ed294155447b54d0b"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38fb50e4e0ae72e675f545c5fbd4327fd369d2aa371bdc4644c5ff6790ffdc2e"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dfa0ab688426d8623808747ab95166d71bc723166cbd3e676280cac0d306c06"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e41168d042e99f82af8dbaa62f823e13e38ddf8fa442f085f0a015d34f3bad97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"786ccaa38f5d875803255d078ace7ed3a99fffbf01c06e322520d14d4be71532","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["786ccaa38f5d875803255d078ace7ed3a99fffbf01c06e322520d14d4be71532"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c2a00c0bcfe2ca129ef733442534badf1927c36ded0ee140764342c6ded1405"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"786ccaa38f5d875803255d078ace7ed3a99fffbf01c06e322520d14d4be71532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b15ae18e47ce27353ded1886aa4cc0257047a5bf1f8265ed294155447b54d0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b15ae18e47ce27353ded1886aa4cc0257047a5bf1f8265ed294155447b54d0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b15ae18e47ce27353ded1886aa4cc0257047a5bf1f8265ed294155447b54d0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38fb50e4e0ae72e675f545c5fbd4327fd369d2aa371bdc4644c5ff6790ffdc2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6dfa0ab688426d8623808747ab95166d71bc723166cbd3e676280cac0d306c06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6dfa0ab688426d8623808747ab95166d71bc723166cbd3e676280cac0d306c06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e41168d042e99f82af8dbaa62f823e13e38ddf8fa442f085f0a015d34f3bad97"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/786ccaa38f5d875803255d078ace7ed3a99fffbf01c06e322520d14d4be71532"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6dfa0ab688426d8623808747ab95166d71bc723166cbd3e676280cac0d306c06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1c2a00c0bcfe2ca129ef733442534badf1927c36ded0ee140764342c6ded1405","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1c2a00c0bcfe2ca129ef733442534badf1927c36ded0ee140764342c6ded1405"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b15ae18e47ce27353ded1886aa4cc0257047a5bf1f8265ed294155447b54d0b"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6dfa0ab688426d8623808747ab95166d71bc723166cbd3e676280cac0d306c06"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1c2a00c0bcfe2ca129ef733442534badf1927c36ded0ee140764342c6ded1405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1c2a00c0bcfe2ca129ef733442534badf1927c36ded0ee140764342c6ded1405"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e41168d042e99f82af8dbaa62f823e13e38ddf8fa442f085f0a015d34f3bad97","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"786ccaa38f5d875803255d078ace7ed3a99fffbf01c06e322520d14d4be71532","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b15ae18e47ce27353ded1886aa4cc0257047a5bf1f8265ed294155447b54d0b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6dfa0ab688426d8623808747ab95166d71bc723166cbd3e676280cac0d306c06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1c2a00c0bcfe2ca129ef733442534badf1927c36ded0ee140764342c6ded1405","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:06:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3"} {"level":"info","ts":"2026-07-24T04:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3"} {"level":"debug","ts":"2026-07-24T04:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:06:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:06:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:06:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3"} {"level":"info","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40598","PortSpecifier":{"PortValue":40598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40598","PortSpecifier":{"PortValue":40598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865966,"nanos":523978729},"http":{"id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd3f47e0-0cd0-47a1-a8b1-e4da3ca58456","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:53260","PortSpecifier":{"PortValue":53260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e05859d6-f309-4de3-a217-f51d30f2aa59","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:53260","PortSpecifier":{"PortValue":53260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865966,"nanos":589777733},"http":{"id":"e05859d6-f309-4de3-a217-f51d30f2aa59","method":"POST","headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f701e0/rate-test-model-f701e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f701e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e05859d6-f309-4de3-a217-f51d30f2aa59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40610","PortSpecifier":{"PortValue":40610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","method":"POST","path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40610","PortSpecifier":{"PortValue":40610}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865966,"nanos":629354453},"http":{"id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC\"}"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","subscription":"e2e-rate-iso-a-eed5f4","tenant":"e2e-shared-a-5b56b9","userId":"04eeb833-a362-4cfe-a633-cf7318d29d78","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\",\"requestedSubscription\":\"e2e-rate-iso-a-eed5f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eed5f4"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","selected_subscription":"e2e-rate-iso-a-eed5f4","selected_subscription_key":"ai-tenant-e2e-shared-a-5b56b9/e2e-rate-iso-a-eed5f4@ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b74d8aee-8109-46b3-b660-86eedbeb5e95","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40614","PortSpecifier":{"PortValue":40614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","method":"POST","path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40614","PortSpecifier":{"PortValue":40614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865967,"nanos":711935917},"http":{"id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC"} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC\"}"} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","subscription":"e2e-rate-iso-a-eed5f4","tenant":"e2e-shared-a-5b56b9","userId":"04eeb833-a362-4cfe-a633-cf7318d29d78","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\",\"requestedSubscription\":\"e2e-rate-iso-a-eed5f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"}} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eed5f4"} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","selected_subscription":"e2e-rate-iso-a-eed5f4","selected_subscription_key":"ai-tenant-e2e-shared-a-5b56b9/e2e-rate-iso-a-eed5f4@ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfe0a260-cb47-47ac-b83b-1bc39ab24e1b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40626","PortSpecifier":{"PortValue":40626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","method":"POST","path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40626","PortSpecifier":{"PortValue":40626}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865968,"nanos":759696579},"http":{"id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC"} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC\"}"} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","subscription":"e2e-rate-iso-a-eed5f4","tenant":"e2e-shared-a-5b56b9","userId":"04eeb833-a362-4cfe-a633-cf7318d29d78","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\",\"requestedSubscription\":\"e2e-rate-iso-a-eed5f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"}} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eed5f4"} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","selected_subscription":"e2e-rate-iso-a-eed5f4","selected_subscription_key":"ai-tenant-e2e-shared-a-5b56b9/e2e-rate-iso-a-eed5f4@ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7e6f2e0-5bb6-4e41-ab6f-be33a4420b83","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40634","PortSpecifier":{"PortValue":40634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5e624c4-512a-4e24-8739-b0729bc802e9","method":"POST","path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40634","PortSpecifier":{"PortValue":40634}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865969,"nanos":803094063},"http":{"id":"d5e624c4-512a-4e24-8739-b0729bc802e9","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC"} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC\"}"} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","subscription":"e2e-rate-iso-a-eed5f4","tenant":"e2e-shared-a-5b56b9","userId":"04eeb833-a362-4cfe-a633-cf7318d29d78","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\",\"requestedSubscription\":\"e2e-rate-iso-a-eed5f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"}} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eed5f4"} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","selected_subscription":"e2e-rate-iso-a-eed5f4","selected_subscription_key":"ai-tenant-e2e-shared-a-5b56b9/e2e-rate-iso-a-eed5f4@ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5e624c4-512a-4e24-8739-b0729bc802e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40640","PortSpecifier":{"PortValue":40640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","method":"POST","path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:40640","PortSpecifier":{"PortValue":40640}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865970,"nanos":846612066},"http":{"id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC"} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC\"}"} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","subscription":"e2e-rate-iso-a-eed5f4","tenant":"e2e-shared-a-5b56b9","userId":"04eeb833-a362-4cfe-a633-cf7318d29d78","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\",\"requestedSubscription\":\"e2e-rate-iso-a-eed5f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"}} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eed5f4"} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","selected_subscription":"e2e-rate-iso-a-eed5f4","selected_subscription_key":"ai-tenant-e2e-shared-a-5b56b9/e2e-rate-iso-a-eed5f4@ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78c0292b-a2df-4206-9e3d-7e8961d0a125","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52590","PortSpecifier":{"PortValue":52590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","method":"POST","path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52590","PortSpecifier":{"PortValue":52590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865971,"nanos":884019377},"http":{"id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC"} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC\"}"} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","subscription":"e2e-rate-iso-a-eed5f4","tenant":"e2e-shared-a-5b56b9","userId":"04eeb833-a362-4cfe-a633-cf7318d29d78","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\",\"requestedSubscription\":\"e2e-rate-iso-a-eed5f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"}} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eed5f4"} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","selected_subscription":"e2e-rate-iso-a-eed5f4","selected_subscription_key":"ai-tenant-e2e-shared-a-5b56b9/e2e-rate-iso-a-eed5f4@ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14fdc30b-548d-4ec8-9d1e-53649948e92b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52606","PortSpecifier":{"PortValue":52606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"941418c0-3d91-46bb-b8ac-efa8967978d2","method":"POST","path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52606","PortSpecifier":{"PortValue":52606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865972,"nanos":925958855},"http":{"id":"941418c0-3d91-46bb-b8ac-efa8967978d2","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC"} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cMOlFfMRt3FHoQIS_Qt9AeM1TnteCyodh33obTqMq9ZLCxQ2A9y4XSpvYGhC\"}"} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","subscription":"e2e-rate-iso-a-eed5f4","tenant":"e2e-shared-a-5b56b9","userId":"04eeb833-a362-4cfe-a633-cf7318d29d78","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\",\"requestedSubscription\":\"e2e-rate-iso-a-eed5f4\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"}} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-eed5f4"} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"04eeb833-a362-4cfe-a633-cf7318d29d78","keyName":"e2e-rate-a-eed5f4","selected_subscription":"e2e-rate-iso-a-eed5f4","selected_subscription_key":"ai-tenant-e2e-shared-a-5b56b9/e2e-rate-iso-a-eed5f4@ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-eed5f4","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"941418c0-3d91-46bb-b8ac-efa8967978d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:55586","PortSpecifier":{"PortValue":55586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fa623f3-762f-493b-9803-c2fc913a44ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:55586","PortSpecifier":{"PortValue":55586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865981,"nanos":600266237},"http":{"id":"1fa623f3-762f-493b-9803-c2fc913a44ea","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.67:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fa623f3-762f-493b-9803-c2fc913a44ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52230","PortSpecifier":{"PortValue":52230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cdfbe6cd-2078-4631-9544-d9379c888e85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52230","PortSpecifier":{"PortValue":52230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865981,"nanos":637755026},"http":{"id":"cdfbe6cd-2078-4631-9544-d9379c888e85","method":"POST","headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.68:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f701e0/rate-test-model-f701e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f701e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cdfbe6cd-2078-4631-9544-d9379c888e85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:55592","PortSpecifier":{"PortValue":55592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","method":"POST","path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:55592","PortSpecifier":{"PortValue":55592}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865981,"nanos":672450491},"http":{"id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5wldGtJkqltLybM9_PXdIEvTizPWbXuOrhM9Cc4FPthe19CTVjZdMDDJ2K16"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5wldGtJkqltLybM9_PXdIEvTizPWbXuOrhM9Cc4FPthe19CTVjZdMDDJ2K16\"}"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"237bd712-07c5-4a37-9a63-dfbaa870b9cb","keyName":"e2e-rate-a-92966b","subscription":"e2e-rate-iso-a-92966b","tenant":"e2e-shared-a-5b56b9","userId":"237bd712-07c5-4a37-9a63-dfbaa870b9cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\",\"requestedSubscription\":\"e2e-rate-iso-a-92966b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-92966b","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-92966b"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"237bd712-07c5-4a37-9a63-dfbaa870b9cb","keyName":"e2e-rate-a-92966b","selected_subscription":"e2e-rate-iso-a-92966b","selected_subscription_key":"ai-tenant-e2e-shared-a-5b56b9/e2e-rate-iso-a-92966b@ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-92966b","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0cd98d0b-987f-4afb-adaa-8423acdda0bd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:55598","PortSpecifier":{"PortValue":55598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","method":"POST","path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:55598","PortSpecifier":{"PortValue":55598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865982,"nanos":715098929},"http":{"id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5wldGtJkqltLybM9_PXdIEvTizPWbXuOrhM9Cc4FPthe19CTVjZdMDDJ2K16"} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5wldGtJkqltLybM9_PXdIEvTizPWbXuOrhM9Cc4FPthe19CTVjZdMDDJ2K16\"}"} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"237bd712-07c5-4a37-9a63-dfbaa870b9cb","keyName":"e2e-rate-a-92966b","subscription":"e2e-rate-iso-a-92966b","tenant":"e2e-shared-a-5b56b9","userId":"237bd712-07c5-4a37-9a63-dfbaa870b9cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\",\"requestedSubscription\":\"e2e-rate-iso-a-92966b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-92966b","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"}} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-92966b"} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"237bd712-07c5-4a37-9a63-dfbaa870b9cb","keyName":"e2e-rate-a-92966b","selected_subscription":"e2e-rate-iso-a-92966b","selected_subscription_key":"ai-tenant-e2e-shared-a-5b56b9/e2e-rate-iso-a-92966b@ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-92966b","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e557e8c-6ecc-444d-8528-ca9aca4334a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:55600","PortSpecifier":{"PortValue":55600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","method":"POST","path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions","host":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:55600","PortSpecifier":{"PortValue":55600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.67:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865983,"nanos":760030862},"http":{"id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","method":"POST","headers":{":authority":"e2e-shared-a-5b56b9.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5wldGtJkqltLybM9_PXdIEvTizPWbXuOrhM9Cc4FPthe19CTVjZdMDDJ2K16"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5wldGtJkqltLybM9_PXdIEvTizPWbXuOrhM9Cc4FPthe19CTVjZdMDDJ2K16\"}"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"237bd712-07c5-4a37-9a63-dfbaa870b9cb","keyName":"e2e-rate-a-92966b","subscription":"e2e-rate-iso-a-92966b","tenant":"e2e-shared-a-5b56b9","userId":"237bd712-07c5-4a37-9a63-dfbaa870b9cb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\",\"requestedSubscription\":\"e2e-rate-iso-a-92966b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-5b56b9.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-92966b","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-5b56b9/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-92966b"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"237bd712-07c5-4a37-9a63-dfbaa870b9cb","keyName":"e2e-rate-a-92966b","selected_subscription":"e2e-rate-iso-a-92966b","selected_subscription_key":"ai-tenant-e2e-shared-a-5b56b9/e2e-rate-iso-a-92966b@ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-5b56b9","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-92966b","namespace":"ai-tenant-e2e-shared-a-5b56b9","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-5b56b9/rate-test-model-5b56b9"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b513947-42c2-4fcc-923f-bad00b1e2e9b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52234","PortSpecifier":{"PortValue":52234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","method":"POST","path":"/ai-tenant-e2e-shared-b-f701e0/rate-test-model-f701e0/v1/completions","host":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:52234","PortSpecifier":{"PortValue":52234}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.68:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784865983,"nanos":797805173},"http":{"id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","method":"POST","headers":{":authority":"e2e-shared-b-f701e0.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f701e0/rate-test-model-f701e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1aqDbeg5v4m2tDGgV_BrLvHmEazNagRAmhnOIGck1dykFYaahBZnNOwm2ngLg"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f701e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1aqDbeg5v4m2tDGgV_BrLvHmEazNagRAmhnOIGck1dykFYaahBZnNOwm2ngLg\"}"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f701e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"226e1660-2168-4ca0-9d49-7fa957f1449c","keyName":"e2e-rate-b-92966b","subscription":"e2e-rate-iso-b-92966b","tenant":"e2e-shared-b-f701e0","userId":"226e1660-2168-4ca0-9d49-7fa957f1449c","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f701e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f701e0/rate-test-model-f701e0\",\"requestedSubscription\":\"e2e-rate-iso-b-92966b\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f701e0.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f701e0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-92966b","namespace":"ai-tenant-e2e-shared-b-f701e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f701e0/rate-test-model-f701e0"}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f701e0/rate-test-model-f701e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-f701e0/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-92966b"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"226e1660-2168-4ca0-9d49-7fa957f1449c","keyName":"e2e-rate-b-92966b","selected_subscription":"e2e-rate-iso-b-92966b","selected_subscription_key":"ai-tenant-e2e-shared-b-f701e0/e2e-rate-iso-b-92966b@ai-tenant-e2e-shared-b-f701e0/rate-test-model-f701e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f701e0","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-92966b","namespace":"ai-tenant-e2e-shared-b-f701e0","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-f701e0/rate-test-model-f701e0"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:06:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7cfa9288-ca62-4344-a452-5d37c57fa3c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2711a468b1313c3d22ad97d51e3306b17f3c39e55dcfd95b25a8edf72562dd61"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6dfa0ab688426d8623808747ab95166d71bc723166cbd3e676280cac0d306c06"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01dd703280a3ec77343046c6de82b4942ebb89bfb07dd216290a0b75f330e3e5"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/185549ec73cdfc720e201ad6bad3c12751d60a70e98087e01bcaee2d66f58a48"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e08292505f905146574ca4eff9ba7ccc68b9128bfd761e52a64c50be4ec512a"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/786ccaa38f5d875803255d078ace7ed3a99fffbf01c06e322520d14d4be71532"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00dde76e7da444eeb898f0c89a350b3cf70a88c6347a52ae9ec8574b4b62b0f7"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9edc3ec0fe816c22f70c127131ea4b5455e4bf6df98a7f6fa9a5c6a6024e5542"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c2f013ddb22d68626069dcc4395b7c7bdfbfb8a4ae19b7d3e04e3115ac09659"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/71bb25b3929d662a0821229cc9db00e37d79418ef80d8c406cd0e063ba39fc1d"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b15ae18e47ce27353ded1886aa4cc0257047a5bf1f8265ed294155447b54d0b"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab6b0d1bdb692aeede189be909241be2397f0d2fe7aca4d586f4ccc60fb98563"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d66b0517af56aacaaca574117ced0f57c9a4356cfdd4974a2b1855fc1b1f3c59"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7eec989e4987adbaab55716cff4f8df878bfc46d7868eaf6e25c324a17e1501a"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/458f23bfe98e0ae934c1218079b5f6fd62762134fc92726a6c2577aff36693b4"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0df146297fd5fcc5201f994016cb068d8bf59d4a98b74756ddd097ff0b63e529"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1c2a00c0bcfe2ca129ef733442534badf1927c36ded0ee140764342c6ded1405"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffab44db3e239925cda2c1c51bc20ee6d91ea5c6f433b3109ed80a44b375d1b3"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24240aa08a67aa7823861be40afd5aeb45aec9e0f99b6109658de0d9c716d263"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7487873e11d96defb6910f900f6309d6fbebee14c9f3f47393a09a0a591f20a4"} {"level":"info","ts":"2026-07-24T04:06:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc7289156e89bc50d9d09eaf1e297757fff8055d417ffa0af60f8d4d2f351806"} {"level":"info","ts":"2026-07-24T04:06:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38fb50e4e0ae72e675f545c5fbd4327fd369d2aa371bdc4644c5ff6790ffdc2e"} {"level":"info","ts":"2026-07-24T04:06:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e41168d042e99f82af8dbaa62f823e13e38ddf8fa442f085f0a015d34f3bad97"} {"level":"info","ts":"2026-07-24T04:06:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/943c1a76f8e0cf531ddc3a126e165426eddb687898b077db6d73f3b1bcf99fe1"} {"level":"info","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58494","PortSpecifier":{"PortValue":58494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58494","PortSpecifier":{"PortValue":58494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784866047,"nanos":195861186},"http":{"id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","method":"POST","headers":{":authority":"maas.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75d98ccf-5a84-42de-a103-7bba55e4a8e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58506","PortSpecifier":{"PortValue":58506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:58506","PortSpecifier":{"PortValue":58506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.36:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784866047,"nanos":251703954},"http":{"id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","method":"POST","headers":{":authority":"maas.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Db1unANhSVAcSuH5_EeyETdZGIQzIsdAXIynbZ51RaaHkZErZOpZ1MWXELef"} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Db1unANhSVAcSuH5_EeyETdZGIQzIsdAXIynbZ51RaaHkZErZOpZ1MWXELef\"}"} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"21fad62b-b3db-40e3-b7cb-980bb291e37b","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"21fad62b-b3db-40e3-b7cb-980bb291e37b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.36:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"21fad62b-b3db-40e3-b7cb-980bb291e37b","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:07:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77d1c1d6-455b-4214-98ac-ca3d493bbcb0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752"} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752"} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752"} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1"} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1"} {"level":"info","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d79893a92865aceef062c77349b7633a59e64ef35735194675f82be4ac913bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d79893a92865aceef062c77349b7633a59e64ef35735194675f82be4ac913bc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d79893a92865aceef062c77349b7633a59e64ef35735194675f82be4ac913bc1"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d79893a92865aceef062c77349b7633a59e64ef35735194675f82be4ac913bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d79893a92865aceef062c77349b7633a59e64ef35735194675f82be4ac913bc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d79893a92865aceef062c77349b7633a59e64ef35735194675f82be4ac913bc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d79893a92865aceef062c77349b7633a59e64ef35735194675f82be4ac913bc1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752"} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d79893a92865aceef062c77349b7633a59e64ef35735194675f82be4ac913bc1"} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752"} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64"} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac"} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b"} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77616bb511a8c158764bf939ffa67064ec6cd0e9654cb96064087a83f3b9cb63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77616bb511a8c158764bf939ffa67064ec6cd0e9654cb96064087a83f3b9cb63"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77616bb511a8c158764bf939ffa67064ec6cd0e9654cb96064087a83f3b9cb63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96cea128fbe098cbe440b335a5298f75147de7f76b7c503c09ec1dfee19bef5"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96cea128fbe098cbe440b335a5298f75147de7f76b7c503c09ec1dfee19bef5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d96cea128fbe098cbe440b335a5298f75147de7f76b7c503c09ec1dfee19bef5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77616bb511a8c158764bf939ffa67064ec6cd0e9654cb96064087a83f3b9cb63"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96cea128fbe098cbe440b335a5298f75147de7f76b7c503c09ec1dfee19bef5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77616bb511a8c158764bf939ffa67064ec6cd0e9654cb96064087a83f3b9cb63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77616bb511a8c158764bf939ffa67064ec6cd0e9654cb96064087a83f3b9cb63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96cea128fbe098cbe440b335a5298f75147de7f76b7c503c09ec1dfee19bef5"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77616bb511a8c158764bf939ffa67064ec6cd0e9654cb96064087a83f3b9cb63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77616bb511a8c158764bf939ffa67064ec6cd0e9654cb96064087a83f3b9cb63"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d96cea128fbe098cbe440b335a5298f75147de7f76b7c503c09ec1dfee19bef5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77616bb511a8c158764bf939ffa67064ec6cd0e9654cb96064087a83f3b9cb63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"info","ts":"2026-07-24T04:07:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"debug","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-24T04:07:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-24T04:07:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"info","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"info","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-24T04:07:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-24T04:07:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"error","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-24T04:07:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51836","PortSpecifier":{"PortValue":51836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-733dde.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51836","PortSpecifier":{"PortValue":51836}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784866083,"nanos":915320956},"http":{"id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","method":"POST","headers":{":authority":"e2e-ipp-a-733dde.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"]}} {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/e3741adc75f3"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fe0e81c1-59f4-4fa9-bf87-1a985833e60b"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"9523052d-992f-40d0-a8e6-47495ccf8da0","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.73:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-733dde.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-733dde/ipp-route-733dde\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-733dde/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:08:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a072ad1-1f51-47c3-8668-80ab2d0d4595","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51852","PortSpecifier":{"PortValue":51852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","method":"POST","path":"/ai-tenant-e2e-ipp-a-733dde/ipp-route-733dde/v1/chat/completions","host":"e2e-ipp-a-733dde.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.13:51852","PortSpecifier":{"PortValue":51852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.73:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784866085,"nanos":985016285},"http":{"id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","method":"POST","headers":{":authority":"e2e-ipp-a-733dde.apps.b3fca911-f795-43a0-91ab-e3741adc75f3.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-733dde/ipp-route-733dde/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6GrEZbdEm8GKRHSS_c88JXvTCDFJ5gz93uI7kaLP7nIwXoEsv2zxyUarQfA3"} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-733dde.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6GrEZbdEm8GKRHSS_c88JXvTCDFJ5gz93uI7kaLP7nIwXoEsv2zxyUarQfA3\"}"} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-733dde.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0229d63c-ebbf-4adc-988b-c50a4225420a","keyName":"e2e-ipp-733dde","subscription":"ipp-route-733dde-sub","tenant":"e2e-ipp-a-733dde","userId":"0229d63c-ebbf-4adc-988b-c50a4225420a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-733dde.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-733dde/ipp-route-733dde\",\"requestedSubscription\":\"ipp-route-733dde-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-733dde.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"ipp-route-733dde","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-733dde-sub","namespace":"ai-tenant-e2e-ipp-a-733dde","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-733dde/ipp-route-733dde"}} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-733dde/ipp-route-733dde\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-733dde/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-733dde-sub"} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0229d63c-ebbf-4adc-988b-c50a4225420a","keyName":"e2e-ipp-733dde","selected_subscription":"ipp-route-733dde-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-733dde/ipp-route-733dde-sub@ai-tenant-e2e-ipp-a-733dde/ipp-route-733dde","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"ipp-route-733dde","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-733dde-sub","namespace":"ai-tenant-e2e-ipp-a-733dde","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-733dde/ipp-route-733dde"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-24T04:08:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f44bf6d4-702e-4701-953b-72ae6e5744ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-24T04:09:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc4b913f7be7ac7bd340399a3f677f2d3acd56ec7e5d3859929d8af05d592396"} {"level":"info","ts":"2026-07-24T04:09:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72f66f3723ede3596ca08f9d28cd56a49869b1ba55cc50668e6a93765c0f8eac"} {"level":"info","ts":"2026-07-24T04:09:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88216b3c7b3afbb7ca106811b69bb9a9e6780534efa1859fdedb56fa32c31b5b"} {"level":"info","ts":"2026-07-24T04:09:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d79893a92865aceef062c77349b7633a59e64ef35735194675f82be4ac913bc1"} {"level":"info","ts":"2026-07-24T04:09:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fae980c24be80f75369da9dc066a036a98804b4b4511701845de6fbcf2cb4d64"} {"level":"info","ts":"2026-07-24T04:09:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93fe3110404c2198dee30cef8aad61282abcbc01de0446ee969ebf146e9de37a"} {"level":"info","ts":"2026-07-24T04:09:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac7d9622eb56da8c62aa0521679890f482f2c9f6044674b283f080ccc534e60b"} {"level":"info","ts":"2026-07-24T04:09:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8dac268810dbe8e01249f44246cb22b1a89c5f3a9db93851732e272edf1f59d1"} {"level":"info","ts":"2026-07-24T04:09:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77616bb511a8c158764bf939ffa67064ec6cd0e9654cb96064087a83f3b9cb63"} {"level":"info","ts":"2026-07-24T04:09:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d96cea128fbe098cbe440b335a5298f75147de7f76b7c503c09ec1dfee19bef5"} {"level":"info","ts":"2026-07-24T04:09:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84cc5c125b0ef06e64e16a07081e6beda59f370880aef442b6218dfda039b752"} {"level":"info","ts":"2026-07-24T04:09:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/607988c6466086a2632f3d8541869db7d7c373abbd34e5b543800c1d7d7a45eb"}