--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-14T16:58:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3313fa913019bc1c30ef98b7c4e31669bd1a12d4985a7506ab18b98dfa69cae4"} {"level":"info","ts":"2026-07-14T16:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cb17d4195b09c343e079b965dab207704ca31f81a3a3699e76a454277db330b3"} {"level":"info","ts":"2026-07-14T16:58:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/159c596e9bfed0e5d4c2bfe2b4ea49d878826dff99e31785009f50bec3391944"} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9"} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9"} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9"} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9"} {"level":"info","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3"} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3"} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3"} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3"} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ccf5b20cf7e8076013ca137fef08d4cec43f7dc1d96fac03c7419c6811e52f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ccf5b20cf7e8076013ca137fef08d4cec43f7dc1d96fac03c7419c6811e52f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ccf5b20cf7e8076013ca137fef08d4cec43f7dc1d96fac03c7419c6811e52f"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"16ccf5b20cf7e8076013ca137fef08d4cec43f7dc1d96fac03c7419c6811e52f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["16ccf5b20cf7e8076013ca137fef08d4cec43f7dc1d96fac03c7419c6811e52f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"16ccf5b20cf7e8076013ca137fef08d4cec43f7dc1d96fac03c7419c6811e52f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"16ccf5b20cf7e8076013ca137fef08d4cec43f7dc1d96fac03c7419c6811e52f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/16ccf5b20cf7e8076013ca137fef08d4cec43f7dc1d96fac03c7419c6811e52f"} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30"} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf364e3799173c4f99834734a1fb5544b6235bd89933cefa3c5be1385afe2e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf364e3799173c4f99834734a1fb5544b6235bd89933cefa3c5be1385afe2e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf364e3799173c4f99834734a1fb5544b6235bd89933cefa3c5be1385afe2e6"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bf364e3799173c4f99834734a1fb5544b6235bd89933cefa3c5be1385afe2e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bf364e3799173c4f99834734a1fb5544b6235bd89933cefa3c5be1385afe2e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bf364e3799173c4f99834734a1fb5544b6235bd89933cefa3c5be1385afe2e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bf364e3799173c4f99834734a1fb5544b6235bd89933cefa3c5be1385afe2e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:00:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bf364e3799173c4f99834734a1fb5544b6235bd89933cefa3c5be1385afe2e6"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"} {"level":"info","ts":"2026-07-14T17:00:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a"} {"level":"info","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46244","PortSpecifier":{"PortValue":46244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46244","PortSpecifier":{"PortValue":46244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048427,"nanos":243827949},"http":{"id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b94eb21b-b32b-45c4-b252-2629c6dfb1e8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33214","PortSpecifier":{"PortValue":33214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33214","PortSpecifier":{"PortValue":33214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048427,"nanos":299147376},"http":{"id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/auth-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98143c1b-a1c8-4747-8bbd-c3a1738e851b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46256","PortSpecifier":{"PortValue":46256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","method":"GET","path":"/maas-api/v1/api-keys/ea33dd74-3955-4516-82ab-918a0ebd1891","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:46256","PortSpecifier":{"PortValue":46256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048427,"nanos":385673496},"http":{"id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","method":"GET","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ea33dd74-3955-4516-82ab-918a0ebd1891",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ea33dd74-3955-4516-82ab-918a0ebd1891",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a089df7-cbd2-46ea-9622-44c9bbdb4335","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33228","PortSpecifier":{"PortValue":33228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","method":"GET","path":"/maas-api/v1/api-keys/e9bb2235-940b-42d3-abe4-6be3f2e8e249","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:33228","PortSpecifier":{"PortValue":33228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048427,"nanos":426866852},"http":{"id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","method":"GET","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e9bb2235-940b-42d3-abe4-6be3f2e8e249",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e9bb2235-940b-42d3-abe4-6be3f2e8e249",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/auth-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a670887-c4c4-47e4-a337-d8c0c1051c94","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35090","PortSpecifier":{"PortValue":35090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69903320-8db8-4a4b-9d90-bd8e9a911340","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35090","PortSpecifier":{"PortValue":35090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048444,"nanos":689902222},"http":{"id":"69903320-8db8-4a4b-9d90-bd8e9a911340","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69903320-8db8-4a4b-9d90-bd8e9a911340","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34816","PortSpecifier":{"PortValue":34816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:34816","PortSpecifier":{"PortValue":34816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048444,"nanos":733787227},"http":{"id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/auth-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5396db93-9ccf-4ea3-8546-e55d73f2cae6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35094","PortSpecifier":{"PortValue":35094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35094","PortSpecifier":{"PortValue":35094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048444,"nanos":774030320},"http":{"id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","method":"GET","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GJGVORipsMdvRpT4_touqXJmPdumyAse3cLWK30yY7zLUTjX7vQ4inJFzmlz"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GJGVORipsMdvRpT4_touqXJmPdumyAse3cLWK30yY7zLUTjX7vQ4inJFzmlz\"}"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93f3e196-5740-4b91-9773-24306cc39699","keyName":"e2e-auth-iso-a-ebc4d8","subscription":"e2e-auth-iso-5c4365","tenant":"e2e-shared-a-584665","userId":"93f3e196-5740-4b91-9773-24306cc39699","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-5c4365"} {"level":"info","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:00:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b32f2fd5-efa0-43bc-8c30-000564c7c704","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"042e0e4c-f17c-45dc-a026-203071767869","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50900","PortSpecifier":{"PortValue":50900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"042e0e4c-f17c-45dc-a026-203071767869","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"042e0e4c-f17c-45dc-a026-203071767869","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50900","PortSpecifier":{"PortValue":50900}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048466,"nanos":482917450},"http":{"id":"042e0e4c-f17c-45dc-a026-203071767869","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"042e0e4c-f17c-45dc-a026-203071767869","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"042e0e4c-f17c-45dc-a026-203071767869","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"042e0e4c-f17c-45dc-a026-203071767869","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"042e0e4c-f17c-45dc-a026-203071767869","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"042e0e4c-f17c-45dc-a026-203071767869","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"042e0e4c-f17c-45dc-a026-203071767869","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"042e0e4c-f17c-45dc-a026-203071767869","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"042e0e4c-f17c-45dc-a026-203071767869","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"042e0e4c-f17c-45dc-a026-203071767869","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"042e0e4c-f17c-45dc-a026-203071767869","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"042e0e4c-f17c-45dc-a026-203071767869","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53872","PortSpecifier":{"PortValue":53872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53872","PortSpecifier":{"PortValue":53872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048466,"nanos":516397637},"http":{"id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/auth-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe74c28c-05b7-4179-a19f-c21fdf2f59df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53876","PortSpecifier":{"PortValue":53876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:53876","PortSpecifier":{"PortValue":53876}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048466,"nanos":557352757},"http":{"id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","method":"GET","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-b1I0E3DUe4gzk2WV_Stb2unn8ctoPAS8XRJQCjhAmiDW0V4cV25WKmIm137i"} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-314eb4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-b1I0E3DUe4gzk2WV_Stb2unn8ctoPAS8XRJQCjhAmiDW0V4cV25WKmIm137i\"}"} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-314eb4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-14T17:01:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c83f30a2-0617-47b8-a10f-0c2c2b5fcedd","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35106","PortSpecifier":{"PortValue":35106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"582887de-6e92-4530-880b-d2c30fdeb4b2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35106","PortSpecifier":{"PortValue":35106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048482,"nanos":39124819},"http":{"id":"582887de-6e92-4530-880b-d2c30fdeb4b2","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"582887de-6e92-4530-880b-d2c30fdeb4b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8467924-33f1-41b2-8d53-bf533faec866","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50894","PortSpecifier":{"PortValue":50894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8467924-33f1-41b2-8d53-bf533faec866","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8467924-33f1-41b2-8d53-bf533faec866","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50894","PortSpecifier":{"PortValue":50894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048482,"nanos":80481121},"http":{"id":"a8467924-33f1-41b2-8d53-bf533faec866","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8467924-33f1-41b2-8d53-bf533faec866","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8467924-33f1-41b2-8d53-bf533faec866","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8467924-33f1-41b2-8d53-bf533faec866","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8467924-33f1-41b2-8d53-bf533faec866","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8467924-33f1-41b2-8d53-bf533faec866","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8467924-33f1-41b2-8d53-bf533faec866","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/auth-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8467924-33f1-41b2-8d53-bf533faec866","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8467924-33f1-41b2-8d53-bf533faec866","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8467924-33f1-41b2-8d53-bf533faec866","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8467924-33f1-41b2-8d53-bf533faec866","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8467924-33f1-41b2-8d53-bf533faec866","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35110","PortSpecifier":{"PortValue":35110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:35110","PortSpecifier":{"PortValue":35110}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048482,"nanos":118644561},"http":{"id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5d9e077e-b4df-48d8-9ea0-350c20c1ddb5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50910","PortSpecifier":{"PortValue":50910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:50910","PortSpecifier":{"PortValue":50910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048482,"nanos":156656517},"http":{"id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/auth-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"da8ab301-5fee-4c20-85a7-ed9de39cadd6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51438","PortSpecifier":{"PortValue":51438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"446e631e-29cf-41a4-8630-fdf48a7609df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51438","PortSpecifier":{"PortValue":51438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048497,"nanos":455005924},"http":{"id":"446e631e-29cf-41a4-8630-fdf48a7609df","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"446e631e-29cf-41a4-8630-fdf48a7609df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59706","PortSpecifier":{"PortValue":59706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59706","PortSpecifier":{"PortValue":59706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048497,"nanos":491505417},"http":{"id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/auth-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0ef8b332-bcc5-4920-b8ad-0fee9b722f7e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b73c9580-c94d-4a23-b451-54c071102079","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59714","PortSpecifier":{"PortValue":59714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b73c9580-c94d-4a23-b451-54c071102079","method":"GET","path":"/maas-api/v1/api-keys/7986105e-30a9-42d5-ae2d-7356d966b04e","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b73c9580-c94d-4a23-b451-54c071102079","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:59714","PortSpecifier":{"PortValue":59714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048497,"nanos":532283186},"http":{"id":"b73c9580-c94d-4a23-b451-54c071102079","method":"GET","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7986105e-30a9-42d5-ae2d-7356d966b04e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b73c9580-c94d-4a23-b451-54c071102079","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b73c9580-c94d-4a23-b451-54c071102079","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b73c9580-c94d-4a23-b451-54c071102079","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7986105e-30a9-42d5-ae2d-7356d966b04e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b73c9580-c94d-4a23-b451-54c071102079","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b73c9580-c94d-4a23-b451-54c071102079","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b73c9580-c94d-4a23-b451-54c071102079","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/auth-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b73c9580-c94d-4a23-b451-54c071102079","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b73c9580-c94d-4a23-b451-54c071102079","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b73c9580-c94d-4a23-b451-54c071102079","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b73c9580-c94d-4a23-b451-54c071102079","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b73c9580-c94d-4a23-b451-54c071102079","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51440","PortSpecifier":{"PortValue":51440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","method":"GET","path":"/maas-api/v1/api-keys/7986105e-30a9-42d5-ae2d-7356d966b04e","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51440","PortSpecifier":{"PortValue":51440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048497,"nanos":570311171},"http":{"id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","method":"GET","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7986105e-30a9-42d5-ae2d-7356d966b04e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7986105e-30a9-42d5-ae2d-7356d966b04e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0bed9ef-954d-445a-a311-22c3da80bbfe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8647c391-447c-9aa8-84ab-b14a06283765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60312","PortSpecifier":{"PortValue":60312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8647c391-447c-9aa8-84ab-b14a06283765","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8647c391-447c-9aa8-84ab-b14a06283765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60312","PortSpecifier":{"PortValue":60312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048512,"nanos":837045465},"http":{"id":"8647c391-447c-9aa8-84ab-b14a06283765","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8647c391-447c-9aa8-84ab-b14a06283765","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8647c391-447c-9aa8-84ab-b14a06283765","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8647c391-447c-9aa8-84ab-b14a06283765","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8647c391-447c-9aa8-84ab-b14a06283765","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8647c391-447c-9aa8-84ab-b14a06283765","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8647c391-447c-9aa8-84ab-b14a06283765","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8647c391-447c-9aa8-84ab-b14a06283765","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8647c391-447c-9aa8-84ab-b14a06283765","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8647c391-447c-9aa8-84ab-b14a06283765","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8647c391-447c-9aa8-84ab-b14a06283765","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8647c391-447c-9aa8-84ab-b14a06283765","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54886","PortSpecifier":{"PortValue":54886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:54886","PortSpecifier":{"PortValue":54886}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048512,"nanos":876010974},"http":{"id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/auth-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfd84064-86ee-4ca1-91ba-4fd38216aff0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60322","PortSpecifier":{"PortValue":60322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:60322","PortSpecifier":{"PortValue":60322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048512,"nanos":915502492},"http":{"id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-kjUNNeGT3vZVaJV_dCvFNaIqOohSiJiWdXorilda83COBFi7he0TZCqSwOt"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-kjUNNeGT3vZVaJV_dCvFNaIqOohSiJiWdXorilda83COBFi7he0TZCqSwOt\"}"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"326f53b8-ff19-4c6d-b5b6-42bc6a16f170","keyName":"e2e-auth-iso-a-0deaa3","subscription":"e2e-auth-iso-a1cb1c","tenant":"e2e-shared-a-584665","userId":"326f53b8-ff19-4c6d-b5b6-42bc6a16f170","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/auth-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a1cb1c"} {"level":"info","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:01:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7d28d51-d10e-442d-806a-4eb34b127c5b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1930a38d33e01c6c733165411340e8c6bd72e56712b201036f01f3c77fa6f4f9"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13782e7541de3c2b7d20df693c914ae20107cf7f7bc1d2bede0b00b7c2e587a5"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b832aa976fa9247ab14e28c5fd177616c01ec895103f681daef9985c29fdcbe1"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/642b401b9c0d0e57d881f6db0311cf586f6581389d724ef672a95dd01a381f29"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc0157f4b7335ef398a55dcdd1e3897d67c345a4ee29d204efc306eebb46fdeb"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdb7988cfe2096ff93628c04ff21689830c0c0e45bc916aa1e903a8bc2863ab2"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b50420c1c708b2a1439ff401581989db16ff0cb9bcdb1c0a179b93e3ceeb299"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f35738262cb0efd49c44142eface8ff3d7be78e04d88f7fc1c184b9b8547757"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d02e1618f6f5408fa966d291cdfc2e5cb9545ee268604d6063d0c7490e44768"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a24051f5dc7f7b157bf84438cc3ce5b8e52615dc7e1c83a74447cd01741d9c30"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/16ccf5b20cf7e8076013ca137fef08d4cec43f7dc1d96fac03c7419c6811e52f"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d813452dd0d1f0fe88f3047f9e334969cd0f7d8f360a2d566b813a52e5ff32f3"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c4b883626c2b060a9a94e974b4ced172ecf978427ecc290629330d2a81460a9"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/717265c63aad6aeb88b03c372549763538c0d699d0b5a04fdee7c79fd4ac021a"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bf364e3799173c4f99834734a1fb5544b6235bd89933cefa3c5be1385afe2e6"} {"level":"info","ts":"2026-07-14T17:01:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e04193b098d5aef0eaae9d7583c6209a0dc6fd586d23492b74c99cac9b361fe"} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d"} {"level":"error","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d"} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"} {"level":"debug","ts":"2026-07-14T17:02:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"error","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815"} {"level":"info","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75"} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75"} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6"} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"error","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"} {"level":"info","ts":"2026-07-14T17:02:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6"} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"} {"level":"debug","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75"} {"level":"debug","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75"} {"level":"debug","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75"} {"level":"info","ts":"2026-07-14T17:02:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"} {"level":"info","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3"} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d"} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815"} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:02:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6"} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"} {"level":"info","ts":"2026-07-14T17:02:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"info","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52384","PortSpecifier":{"PortValue":52384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1aa04584-abca-4469-aa43-5c9d187885f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52384","PortSpecifier":{"PortValue":52384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048573,"nanos":767649856},"http":{"id":"1aa04584-abca-4469-aa43-5c9d187885f8","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/sub-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1aa04584-abca-4469-aa43-5c9d187885f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49246","PortSpecifier":{"PortValue":49246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49246","PortSpecifier":{"PortValue":49246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048573,"nanos":808606679},"http":{"id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/sub-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fdfa8ffa-a4ea-4c19-be55-9befd06ea1e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52396","PortSpecifier":{"PortValue":52396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52396","PortSpecifier":{"PortValue":52396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048573,"nanos":850380722},"http":{"id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","method":"GET","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17Dr2cJ3UguHzRbK_ntQPxtunjYmkAc7yo9vXdrS26tIEaCpzxtcHMHvyGVi"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17Dr2cJ3UguHzRbK_ntQPxtunjYmkAc7yo9vXdrS26tIEaCpzxtcHMHvyGVi\"}"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39b70db0-e3e5-4f2c-99c2-ee124bb744ad","keyName":"e2e-sub-iso-8cffee","subscription":"e2e-a-only-c8d135","tenant":"e2e-shared-a-584665","userId":"39b70db0-e3e5-4f2c-99c2-ee124bb744ad","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/sub-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c8d135"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"061316d9-f481-4bfa-9afc-dbe88449d6e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39c68e22-ad6c-450c-8430-265962567b82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49252","PortSpecifier":{"PortValue":49252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"39c68e22-ad6c-450c-8430-265962567b82","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"39c68e22-ad6c-450c-8430-265962567b82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49252","PortSpecifier":{"PortValue":49252}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048573,"nanos":890174985},"http":{"id":"39c68e22-ad6c-450c-8430-265962567b82","method":"GET","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"39c68e22-ad6c-450c-8430-265962567b82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1FFKC5UOYfNVxNjuQ_sdHEwNSxoYBSGfy7YMDP0YPIPSYFvWcmaqBtoYFHowy"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"39c68e22-ad6c-450c-8430-265962567b82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-314eb4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1FFKC5UOYfNVxNjuQ_sdHEwNSxoYBSGfy7YMDP0YPIPSYFvWcmaqBtoYFHowy\"}"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"39c68e22-ad6c-450c-8430-265962567b82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-314eb4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1b76433b-14f8-4350-a5aa-cc3febf12a26","keyName":"e2e-sub-iso-04e0ed","subscription":"e2e-b-only-c8d135","tenant":"e2e-shared-b-314eb4","userId":"1b76433b-14f8-4350-a5aa-cc3febf12a26","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"39c68e22-ad6c-450c-8430-265962567b82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39c68e22-ad6c-450c-8430-265962567b82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39c68e22-ad6c-450c-8430-265962567b82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"39c68e22-ad6c-450c-8430-265962567b82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/sub-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"39c68e22-ad6c-450c-8430-265962567b82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39c68e22-ad6c-450c-8430-265962567b82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39c68e22-ad6c-450c-8430-265962567b82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"39c68e22-ad6c-450c-8430-265962567b82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c8d135"} {"level":"info","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39c68e22-ad6c-450c-8430-265962567b82","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:02:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"39c68e22-ad6c-450c-8430-265962567b82","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52404","PortSpecifier":{"PortValue":52404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23da09d1-4b35-47e3-af34-0a4f15207931","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52404","PortSpecifier":{"PortValue":52404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048581,"nanos":937894963},"http":{"id":"23da09d1-4b35-47e3-af34-0a4f15207931","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/sub-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23da09d1-4b35-47e3-af34-0a4f15207931","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49268","PortSpecifier":{"PortValue":49268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49268","PortSpecifier":{"PortValue":49268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048581,"nanos":984203274},"http":{"id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/sub-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:03:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f4b3eb01-2af5-451b-a94b-f25c91c92326","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52420","PortSpecifier":{"PortValue":52420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:52420","PortSpecifier":{"PortValue":52420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048582,"nanos":22207271},"http":{"id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XYnA3n86N8CUS3W3_CgjZZISaiUVbUwJES7V1LuzoNxv6w9xUzVOFxnSE1G"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XYnA3n86N8CUS3W3_CgjZZISaiUVbUwJES7V1LuzoNxv6w9xUzVOFxnSE1G\"}"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"914f7688-eeb6-44f1-ba0d-cebe57b11e93","keyName":"e2e-sub-iso-34c97a","subscription":"e2e-shared-sub-4e3f46","tenant":"e2e-shared-a-584665","userId":"914f7688-eeb6-44f1-ba0d-cebe57b11e93","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/sub-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4e3f46"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f44c4ba6-9021-48d2-bfd3-09d23cd2f74c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49272","PortSpecifier":{"PortValue":49272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23bb12e0-154a-41f8-963b-831aac030fd6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:49272","PortSpecifier":{"PortValue":49272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048582,"nanos":58486366},"http":{"id":"23bb12e0-154a-41f8-963b-831aac030fd6","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Vq6T9sMDDcZywWah_ArFV4UmEHksNykG4rqoZRiFAHNxdgOPPmNhS9BNDGNg"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-314eb4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Vq6T9sMDDcZywWah_ArFV4UmEHksNykG4rqoZRiFAHNxdgOPPmNhS9BNDGNg\"}"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-314eb4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb97d395-d929-404b-afbf-0edabc5edbd2","keyName":"e2e-sub-iso-55e646","subscription":"e2e-shared-sub-4e3f46","tenant":"e2e-shared-b-314eb4","userId":"fb97d395-d929-404b-afbf-0edabc5edbd2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/sub-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-4e3f46"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:03:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23bb12e0-154a-41f8-963b-831aac030fd6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f3c38e506618fc2e786750bb2a944444b23399c05cc89f4cd4f65bf5ce82829"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e63de12030b7256911cc676545df9ada12de11e848649a442f1584930f506815"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fbfd188a91ba33e508ddd27efac7be35c32311a36634bba3ac13aa9950dc5f6"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be24c3366f0f8d5f4d640e96d4a6b4cd77f33bd89935bb344b1b9d6ffbdd62f3"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f3d5881a5519bf8532a3c1acbace050714b6091ad22bea08fb884a5f229c27e"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0cb91da091860e3cb992a6e2183d55ed6b530c2123022ed167dc3dba77fc9310"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b4ad1dce4247319bb8c15a6afef3c9573e73901ad4892e91e09ede1d5e24f16"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4fa263e1537287751f8b37cb3cf0fd551a93f56b0fb0cc6df2a293dbcaa4106f"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d8f10a38411912d70ffc81ca75ff1d36a0d6bd73f9ac0c4e308acbaa6189f7d"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba234840fa5ed25a693a8e171a1d6151868121e3b5ffbaba5f828333741578b0"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78e3b6d9aa4274d2b4801ad8e141319ec8d608b7b7e151ed2b418f177f2c9edd"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/434f5fe53b42331042bf0068309dc4520aa771c1ebbdf341d4244a4a9791cd13"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59d84cc4b40a72a9d968ff24270a67b2086c81865d4e261c48917094970a2f7b"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d40dd522f2ab6971d6a0d3486e6b386aaded8e1c9b0a94b63d49712356657dff"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0276724848b8aa5aefa4247998ed959313a3b3358f02d69543aaf85e82810fa"} {"level":"info","ts":"2026-07-14T17:03:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/884a00dfebef5c8f9903103f30f4d840627525b80cdf12c3f4fdc30997014e75"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"debug","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd"} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7"} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7"} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c"} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c"} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a"} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37"} {"level":"error","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"} {"level":"debug","ts":"2026-07-14T17:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37"} {"level":"info","ts":"2026-07-14T17:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"} {"level":"debug","ts":"2026-07-14T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"} {"level":"info","ts":"2026-07-14T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-14T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5"} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58"} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f"} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f"} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8"} {"level":"error","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f"} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"debug","ts":"2026-07-14T17:03:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b"} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b"} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b"} {"level":"info","ts":"2026-07-14T17:03:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37"} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"debug","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T17:03:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T17:03:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T17:03:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T17:03:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7"} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"} {"level":"debug","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5"} {"level":"info","ts":"2026-07-14T17:03:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f"} {"level":"info","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36778","PortSpecifier":{"PortValue":36778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36778","PortSpecifier":{"PortValue":36778}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048639,"nanos":558406731},"http":{"id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5cfb186f-9f55-4e30-8ecc-a57b4ec0558e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51458","PortSpecifier":{"PortValue":51458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:51458","PortSpecifier":{"PortValue":51458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048639,"nanos":600432092},"http":{"id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/rate-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0bd0b72f-0b68-461a-a4e7-5f3ed9ae065e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36782","PortSpecifier":{"PortValue":36782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b95e562-a198-4879-a75e-44ecc0570fed","method":"POST","path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36782","PortSpecifier":{"PortValue":36782}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048639,"nanos":636432753},"http":{"id":"6b95e562-a198-4879-a75e-44ecc0570fed","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GOXpAjLhUEotl4Ld_TxcagUJHxcK2SjLpW7EB9rdWnQbgwwbnYzl5W9pYSQb"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GOXpAjLhUEotl4Ld_TxcagUJHxcK2SjLpW7EB9rdWnQbgwwbnYzl5W9pYSQb\"}"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60f0562f-3913-4a43-8381-52d581b963db","keyName":"e2e-rate-a-6e9b1c","subscription":"e2e-rate-iso-a-6e9b1c","tenant":"e2e-shared-a-584665","userId":"60f0562f-3913-4a43-8381-52d581b963db","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\",\"requestedSubscription\":\"e2e-rate-iso-a-6e9b1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e9b1c","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6e9b1c"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60f0562f-3913-4a43-8381-52d581b963db","keyName":"e2e-rate-a-6e9b1c","selected_subscription":"e2e-rate-iso-a-6e9b1c","selected_subscription_key":"ai-tenant-e2e-shared-a-584665/e2e-rate-iso-a-6e9b1c@ai-tenant-e2e-shared-a-584665/rate-test-model-584665","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e9b1c","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:03:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b95e562-a198-4879-a75e-44ecc0570fed","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36798","PortSpecifier":{"PortValue":36798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","method":"POST","path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36798","PortSpecifier":{"PortValue":36798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048640,"nanos":714441052},"http":{"id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GOXpAjLhUEotl4Ld_TxcagUJHxcK2SjLpW7EB9rdWnQbgwwbnYzl5W9pYSQb"} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GOXpAjLhUEotl4Ld_TxcagUJHxcK2SjLpW7EB9rdWnQbgwwbnYzl5W9pYSQb\"}"} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60f0562f-3913-4a43-8381-52d581b963db","keyName":"e2e-rate-a-6e9b1c","subscription":"e2e-rate-iso-a-6e9b1c","tenant":"e2e-shared-a-584665","userId":"60f0562f-3913-4a43-8381-52d581b963db","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\",\"requestedSubscription\":\"e2e-rate-iso-a-6e9b1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e9b1c","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6e9b1c"} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60f0562f-3913-4a43-8381-52d581b963db","keyName":"e2e-rate-a-6e9b1c","selected_subscription":"e2e-rate-iso-a-6e9b1c","selected_subscription_key":"ai-tenant-e2e-shared-a-584665/e2e-rate-iso-a-6e9b1c@ai-tenant-e2e-shared-a-584665/rate-test-model-584665","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e9b1c","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:04:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d23974f8-4149-4c6f-bd9d-5d6e2a34fb72","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36808","PortSpecifier":{"PortValue":36808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","method":"POST","path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:36808","PortSpecifier":{"PortValue":36808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048641,"nanos":761954873},"http":{"id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GOXpAjLhUEotl4Ld_TxcagUJHxcK2SjLpW7EB9rdWnQbgwwbnYzl5W9pYSQb"} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GOXpAjLhUEotl4Ld_TxcagUJHxcK2SjLpW7EB9rdWnQbgwwbnYzl5W9pYSQb\"}"} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"60f0562f-3913-4a43-8381-52d581b963db","keyName":"e2e-rate-a-6e9b1c","subscription":"e2e-rate-iso-a-6e9b1c","tenant":"e2e-shared-a-584665","userId":"60f0562f-3913-4a43-8381-52d581b963db","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\",\"requestedSubscription\":\"e2e-rate-iso-a-6e9b1c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e9b1c","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-6e9b1c"} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"60f0562f-3913-4a43-8381-52d581b963db","keyName":"e2e-rate-a-6e9b1c","selected_subscription":"e2e-rate-iso-a-6e9b1c","selected_subscription_key":"ai-tenant-e2e-shared-a-584665/e2e-rate-iso-a-6e9b1c@ai-tenant-e2e-shared-a-584665/rate-test-model-584665","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-6e9b1c","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:04:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d42a1f93-bf12-4f23-bdc1-a904627d9b75","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48070","PortSpecifier":{"PortValue":48070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48070","PortSpecifier":{"PortValue":48070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048651,"nanos":497823035},"http":{"id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.60:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e2a0d0f9-c151-9553-82e6-6f9552f20d92","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42552","PortSpecifier":{"PortValue":42552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42552","PortSpecifier":{"PortValue":42552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048651,"nanos":537664459},"http":{"id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"60aef727-0618-4c31-8adc-dcd29ee43127","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"]}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1917fdeac182"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=175057d0-5f8a-4263-8533-028f38700250"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"60aef727-0618-4c31-8adc-dcd29ee43127","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.48:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/rate-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f02f35e0-9abb-441f-8f03-02dd4a52c806","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48084","PortSpecifier":{"PortValue":48084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","method":"POST","path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48084","PortSpecifier":{"PortValue":48084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048651,"nanos":572967386},"http":{"id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Mx5jZXx0a52xdZPN_LQ8mqHMU8EBnb0F95rfbbUnK80X1Mmny0mJ901ghSR3"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Mx5jZXx0a52xdZPN_LQ8mqHMU8EBnb0F95rfbbUnK80X1Mmny0mJ901ghSR3\"}"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4adcd262-c8ed-4cba-ab03-52d3f2d3455f","keyName":"e2e-rate-a-bf8bcc","subscription":"e2e-rate-iso-a-bf8bcc","tenant":"e2e-shared-a-584665","userId":"4adcd262-c8ed-4cba-ab03-52d3f2d3455f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\",\"requestedSubscription\":\"e2e-rate-iso-a-bf8bcc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bf8bcc","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bf8bcc"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4adcd262-c8ed-4cba-ab03-52d3f2d3455f","keyName":"e2e-rate-a-bf8bcc","selected_subscription":"e2e-rate-iso-a-bf8bcc","selected_subscription_key":"ai-tenant-e2e-shared-a-584665/e2e-rate-iso-a-bf8bcc@ai-tenant-e2e-shared-a-584665/rate-test-model-584665","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bf8bcc","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d9e7c32-bdf4-4ff9-b7b9-12471aa09329","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48096","PortSpecifier":{"PortValue":48096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","method":"POST","path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:48096","PortSpecifier":{"PortValue":48096}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048652,"nanos":608983362},"http":{"id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Mx5jZXx0a52xdZPN_LQ8mqHMU8EBnb0F95rfbbUnK80X1Mmny0mJ901ghSR3"} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Mx5jZXx0a52xdZPN_LQ8mqHMU8EBnb0F95rfbbUnK80X1Mmny0mJ901ghSR3\"}"} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4adcd262-c8ed-4cba-ab03-52d3f2d3455f","keyName":"e2e-rate-a-bf8bcc","subscription":"e2e-rate-iso-a-bf8bcc","tenant":"e2e-shared-a-584665","userId":"4adcd262-c8ed-4cba-ab03-52d3f2d3455f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\",\"requestedSubscription\":\"e2e-rate-iso-a-bf8bcc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bf8bcc","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bf8bcc"} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4adcd262-c8ed-4cba-ab03-52d3f2d3455f","keyName":"e2e-rate-a-bf8bcc","selected_subscription":"e2e-rate-iso-a-bf8bcc","selected_subscription_key":"ai-tenant-e2e-shared-a-584665/e2e-rate-iso-a-bf8bcc@ai-tenant-e2e-shared-a-584665/rate-test-model-584665","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bf8bcc","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:04:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4212fb53-6d7e-4ce5-a09b-fbb1f95154b4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23883671-b74b-41ef-980d-8de017250cbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42516","PortSpecifier":{"PortValue":42516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"23883671-b74b-41ef-980d-8de017250cbf","method":"POST","path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions","host":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"23883671-b74b-41ef-980d-8de017250cbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:42516","PortSpecifier":{"PortValue":42516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.60:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048653,"nanos":644654293},"http":{"id":"23883671-b74b-41ef-980d-8de017250cbf","method":"POST","headers":{":authority":"e2e-shared-a-584665.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-584665/rate-test-model-584665/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Mx5jZXx0a52xdZPN_LQ8mqHMU8EBnb0F95rfbbUnK80X1Mmny0mJ901ghSR3"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Mx5jZXx0a52xdZPN_LQ8mqHMU8EBnb0F95rfbbUnK80X1Mmny0mJ901ghSR3\"}"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4adcd262-c8ed-4cba-ab03-52d3f2d3455f","keyName":"e2e-rate-a-bf8bcc","subscription":"e2e-rate-iso-a-bf8bcc","tenant":"e2e-shared-a-584665","userId":"4adcd262-c8ed-4cba-ab03-52d3f2d3455f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\",\"requestedSubscription\":\"e2e-rate-iso-a-bf8bcc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-584665.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bf8bcc","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"23883671-b74b-41ef-980d-8de017250cbf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-584665/rate-test-model-584665\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bf8bcc"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"23883671-b74b-41ef-980d-8de017250cbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4adcd262-c8ed-4cba-ab03-52d3f2d3455f","keyName":"e2e-rate-a-bf8bcc","selected_subscription":"e2e-rate-iso-a-bf8bcc","selected_subscription_key":"ai-tenant-e2e-shared-a-584665/e2e-rate-iso-a-bf8bcc@ai-tenant-e2e-shared-a-584665/rate-test-model-584665","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-584665","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bf8bcc","namespace":"ai-tenant-e2e-shared-a-584665","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23883671-b74b-41ef-980d-8de017250cbf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"23883671-b74b-41ef-980d-8de017250cbf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37906","PortSpecifier":{"PortValue":37906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","method":"POST","path":"/ai-tenant-e2e-shared-b-314eb4/rate-test-model-314eb4/v1/completions","host":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.11:37906","PortSpecifier":{"PortValue":37906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.48:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784048653,"nanos":683000156},"http":{"id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","method":"POST","headers":{":authority":"e2e-shared-b-314eb4.apps.6346cd15-aada-4f3a-bcd8-1917fdeac182.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-314eb4/rate-test-model-314eb4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RMbgBiBkpEQfLdHq_cFSVwWhZCx4LamfRg1oyOvuCMWWD23tEcJQroNz0hi0"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-314eb4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RMbgBiBkpEQfLdHq_cFSVwWhZCx4LamfRg1oyOvuCMWWD23tEcJQroNz0hi0\"}"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-314eb4.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"45ba7a66-f495-41d9-833e-544fa9724d0e","keyName":"e2e-rate-b-bf8bcc","subscription":"e2e-rate-iso-b-bf8bcc","tenant":"e2e-shared-b-314eb4","userId":"45ba7a66-f495-41d9-833e-544fa9724d0e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-314eb4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-314eb4/rate-test-model-314eb4\",\"requestedSubscription\":\"e2e-rate-iso-b-bf8bcc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-314eb4.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-314eb4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bf8bcc","namespace":"ai-tenant-e2e-shared-b-314eb4","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-314eb4/rate-test-model-314eb4\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bf8bcc"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"45ba7a66-f495-41d9-833e-544fa9724d0e","keyName":"e2e-rate-b-bf8bcc","selected_subscription":"e2e-rate-iso-b-bf8bcc","selected_subscription_key":"ai-tenant-e2e-shared-b-314eb4/e2e-rate-iso-b-bf8bcc@ai-tenant-e2e-shared-b-314eb4/rate-test-model-314eb4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-314eb4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bf8bcc","namespace":"ai-tenant-e2e-shared-b-314eb4","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-14T17:04:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c00591f9-c27e-4e29-93bc-ff7d4fb08933","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-14T17:04:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be7448d2e73123bb0afea46f7b58d1583668202d7872f8b58b21659e0e6caae5"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5d3a33e6b197970136019cd81d84d9e34946a821fc27d489887b538bfbc5308a"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc3ac402c4e7fe6d5d7e2c3cd601b36189f4aad4a5a0f4c493328264252fa4bd"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18563a7612cbec4a8363064b9333d2afbb7ac95e1875b3e2ecd67c538125621b"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ed96dc48a92d8c1f22bdff71d285ddf53e28bae88a059746efd56f9c0629491"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6635dbd859ee6ae52a88f633041ef8f359f5d625a464c4c32ececb0f481315c3"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25ac8047715f7759438c70723fc5c2c0cd13b91c03e8b052d83950ccd288f866"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00dc5f0c12a2ed50c29d84f7b8885cf4cb36cfc3dbeef7988219edadd6d03d37"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48c008a226361442033e224c2412bf720cd81020abe929433f30c1a8a5bbd8b8"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14a9450bcbcf155d3e256af8c8f1125194b1e4ebac8b5066b0205d81613da8eb"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80a2255e44520f3e53c9f6bc18b6915b7c499dcd42aa3dd0fa53a498da586a9c"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f54316113509a995f2e4dc87ea7995a49667a78f5b7d4acf4b80142f7ed0c1b"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87a2979e454aaeb5ea69a32995d165781dfce053904d58a633c2299b92f8bf5d"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34f24aff54d13e17ef690ff92a6c38ff10525fbc3ec1a76030c64ae17ee016b9"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42e04e7603f56b670e4c63c0edcf3f16cff4878f130216d275f84e040580cc8f"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a4be07c59df069ce61dd4c16f3d2900c4f52e16f38165dbb8b5812d9198992f"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fd074f7892d473838af6b05790f470f1829bc8cf4359f5b818f21996e9b6f58"} {"level":"info","ts":"2026-07-14T17:04:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c910838f4d2797cb2afa6bf571c09f07ad1634103d07e9c7a6b7c02c8f02c0a7"} {"level":"info","ts":"2026-07-14T17:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0fecafb5f3a1b923399052760206c7edd6304a856ea01e37e8f15aaf27c55d2"} {"level":"info","ts":"2026-07-14T17:05:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d24a018a03d203a84c0bceae432fc2577d7c041b0471b014c8857be3c3986ead"}