--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-06T17:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a79230acd97a91152d033f4fcfc9132fa8f25512dcdaad51b7ad5a0fb19267e"} {"level":"debug","ts":"2026-07-06T17:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:17:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:17:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31"} {"level":"debug","ts":"2026-07-06T17:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:17:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31"} {"level":"debug","ts":"2026-07-06T17:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:17:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:17:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:17:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31"} {"level":"info","ts":"2026-07-06T17:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4415c1d367bf752f9a2362e427610e70e2b7b2f60b4fc647a50382b133834f80"} {"level":"info","ts":"2026-07-06T17:17:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f843f539110cb877e4f9514d011c0ca22036bf9e471917972d01046954a5435"} {"level":"info","ts":"2026-07-06T17:17:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5382d09b140c2e70e573c9c566603b7e758957c1cf025dbadd1850555897fc31"} {"level":"info","ts":"2026-07-06T17:17:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a79230acd97a91152d033f4fcfc9132fa8f25512dcdaad51b7ad5a0fb19267e"} {"level":"debug","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e"} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e"} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:35Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"error","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70"} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70"} {"level":"debug","ts":"2026-07-06T17:20:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f"} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"} {"level":"error","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd"} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"} {"level":"error","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd"} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd"} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d"} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:20:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1"} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:20:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"} {"level":"info","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60030","PortSpecifier":{"PortValue":60030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ce888b2-0b3d-4bac-918b-572476ff5735","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60030","PortSpecifier":{"PortValue":60030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358446,"nanos":934057067},"http":{"id":"2ce888b2-0b3d-4bac-918b-572476ff5735","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:20:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ce888b2-0b3d-4bac-918b-572476ff5735","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35214","PortSpecifier":{"PortValue":35214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35214","PortSpecifier":{"PortValue":35214}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358446,"nanos":997397831},"http":{"id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/auth-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fc0ec98-bb0c-43d6-a7dc-1a1a3ef27c11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60036","PortSpecifier":{"PortValue":60036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","method":"GET","path":"/maas-api/v1/api-keys/277ddaaf-f9aa-43f9-a317-61978cf6cf30","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60036","PortSpecifier":{"PortValue":60036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358447,"nanos":93096665},"http":{"id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","method":"GET","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/277ddaaf-f9aa-43f9-a317-61978cf6cf30",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/277ddaaf-f9aa-43f9-a317-61978cf6cf30",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19bd91ad-21ff-434b-84ce-3cf4e186c278","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e719176c-91a4-42b3-a701-f4994887c897","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35218","PortSpecifier":{"PortValue":35218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e719176c-91a4-42b3-a701-f4994887c897","method":"GET","path":"/maas-api/v1/api-keys/a3990ffc-bbf3-4486-b9e3-278afe0f9d7e","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e719176c-91a4-42b3-a701-f4994887c897","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35218","PortSpecifier":{"PortValue":35218}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358447,"nanos":131536930},"http":{"id":"e719176c-91a4-42b3-a701-f4994887c897","method":"GET","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a3990ffc-bbf3-4486-b9e3-278afe0f9d7e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e719176c-91a4-42b3-a701-f4994887c897","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e719176c-91a4-42b3-a701-f4994887c897","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e719176c-91a4-42b3-a701-f4994887c897","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a3990ffc-bbf3-4486-b9e3-278afe0f9d7e",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e719176c-91a4-42b3-a701-f4994887c897","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e719176c-91a4-42b3-a701-f4994887c897","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e719176c-91a4-42b3-a701-f4994887c897","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/auth-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e719176c-91a4-42b3-a701-f4994887c897","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e719176c-91a4-42b3-a701-f4994887c897","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e719176c-91a4-42b3-a701-f4994887c897","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e719176c-91a4-42b3-a701-f4994887c897","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:20:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e719176c-91a4-42b3-a701-f4994887c897","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43262","PortSpecifier":{"PortValue":43262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b318bc10-8317-4abc-9ff4-9316bb235102","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43262","PortSpecifier":{"PortValue":43262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358464,"nanos":253844885},"http":{"id":"b318bc10-8317-4abc-9ff4-9316bb235102","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b318bc10-8317-4abc-9ff4-9316bb235102","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44906","PortSpecifier":{"PortValue":44906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44906","PortSpecifier":{"PortValue":44906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358464,"nanos":294109964},"http":{"id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/auth-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0e83bdc-2c8b-4e9a-a769-0629438fde11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43276","PortSpecifier":{"PortValue":43276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43276","PortSpecifier":{"PortValue":43276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358464,"nanos":346159171},"http":{"id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","method":"GET","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1BmKTU02uXlffRo8f_pdwoPfojA2ENI8iEj6yC3WZA6QgSKRWpm1zPVXJutDE"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1BmKTU02uXlffRo8f_pdwoPfojA2ENI8iEj6yC3WZA6QgSKRWpm1zPVXJutDE\"}"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a29a1076-7ae9-4a39-927a-66c4bafea01e","keyName":"e2e-auth-iso-a-89c803","subscription":"e2e-auth-iso-8ee324","tenant":"e2e-shared-a-2cd1eb","userId":"a29a1076-7ae9-4a39-927a-66c4bafea01e","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8ee324"} {"level":"info","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2007618c-e86b-4f0c-bf58-da6054ea1b72","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52504","PortSpecifier":{"PortValue":52504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:52504","PortSpecifier":{"PortValue":52504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358481,"nanos":541684921},"http":{"id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8d46264-c727-45f0-8e8f-e1d6bae1a01d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44282","PortSpecifier":{"PortValue":44282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"188c67d1-a845-465b-ad5c-eae77e80cab3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44282","PortSpecifier":{"PortValue":44282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358481,"nanos":579226866},"http":{"id":"188c67d1-a845-465b-ad5c-eae77e80cab3","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/auth-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"188c67d1-a845-465b-ad5c-eae77e80cab3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f852db65-fecf-44bf-8bd5-a62abc510475","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44288","PortSpecifier":{"PortValue":44288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f852db65-fecf-44bf-8bd5-a62abc510475","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f852db65-fecf-44bf-8bd5-a62abc510475","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44288","PortSpecifier":{"PortValue":44288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358481,"nanos":615282402},"http":{"id":"f852db65-fecf-44bf-8bd5-a62abc510475","method":"GET","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f852db65-fecf-44bf-8bd5-a62abc510475","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1NjaVFZ9SOGJCtIUW_kukdsO1Xmzih45sR2qwRAkGLHOKkWiUGB9uW01Gl4cZ"} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f852db65-fecf-44bf-8bd5-a62abc510475","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0ebdd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1NjaVFZ9SOGJCtIUW_kukdsO1Xmzih45sR2qwRAkGLHOKkWiUGB9uW01Gl4cZ\"}"} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f852db65-fecf-44bf-8bd5-a62abc510475","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0ebdd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f852db65-fecf-44bf-8bd5-a62abc510475","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f852db65-fecf-44bf-8bd5-a62abc510475","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"f852db65-fecf-44bf-8bd5-a62abc510475","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f852db65-fecf-44bf-8bd5-a62abc510475","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T17:21:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f852db65-fecf-44bf-8bd5-a62abc510475","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40564","PortSpecifier":{"PortValue":40564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40564","PortSpecifier":{"PortValue":40564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358498,"nanos":781915687},"http":{"id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9877c31-a9ed-472e-abac-a8aaa8cae9df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57312","PortSpecifier":{"PortValue":57312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57312","PortSpecifier":{"PortValue":57312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358498,"nanos":817976678},"http":{"id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/auth-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"870d648b-0be9-4d29-a08a-e58b7e24e02a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"364591df-cd50-449f-be38-5b65c03a4f02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40578","PortSpecifier":{"PortValue":40578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"364591df-cd50-449f-be38-5b65c03a4f02","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"364591df-cd50-449f-be38-5b65c03a4f02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40578","PortSpecifier":{"PortValue":40578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358498,"nanos":858053783},"http":{"id":"364591df-cd50-449f-be38-5b65c03a4f02","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"364591df-cd50-449f-be38-5b65c03a4f02","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"364591df-cd50-449f-be38-5b65c03a4f02","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"364591df-cd50-449f-be38-5b65c03a4f02","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"364591df-cd50-449f-be38-5b65c03a4f02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"364591df-cd50-449f-be38-5b65c03a4f02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"364591df-cd50-449f-be38-5b65c03a4f02","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"364591df-cd50-449f-be38-5b65c03a4f02","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"364591df-cd50-449f-be38-5b65c03a4f02","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"364591df-cd50-449f-be38-5b65c03a4f02","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"364591df-cd50-449f-be38-5b65c03a4f02","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"364591df-cd50-449f-be38-5b65c03a4f02","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57316","PortSpecifier":{"PortValue":57316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57316","PortSpecifier":{"PortValue":57316}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358498,"nanos":892118247},"http":{"id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/auth-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ab06fb9-ced7-41ee-a890-33fffa5ee4f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a4d0704-b668-4339-bd05-351241a29007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43404","PortSpecifier":{"PortValue":43404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a4d0704-b668-4339-bd05-351241a29007","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a4d0704-b668-4339-bd05-351241a29007","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43404","PortSpecifier":{"PortValue":43404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358516,"nanos":95924149},"http":{"id":"2a4d0704-b668-4339-bd05-351241a29007","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2a4d0704-b668-4339-bd05-351241a29007","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a4d0704-b668-4339-bd05-351241a29007","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a4d0704-b668-4339-bd05-351241a29007","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a4d0704-b668-4339-bd05-351241a29007","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a4d0704-b668-4339-bd05-351241a29007","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a4d0704-b668-4339-bd05-351241a29007","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2a4d0704-b668-4339-bd05-351241a29007","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a4d0704-b668-4339-bd05-351241a29007","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2a4d0704-b668-4339-bd05-351241a29007","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a4d0704-b668-4339-bd05-351241a29007","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a4d0704-b668-4339-bd05-351241a29007","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36692","PortSpecifier":{"PortValue":36692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36692","PortSpecifier":{"PortValue":36692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358516,"nanos":132374694},"http":{"id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/auth-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8276c357-2ad9-40d5-ad30-a3f024eb097f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36694","PortSpecifier":{"PortValue":36694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","method":"GET","path":"/maas-api/v1/api-keys/ec13add7-47eb-4b22-b026-11fa4e572217","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36694","PortSpecifier":{"PortValue":36694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358516,"nanos":168689790},"http":{"id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","method":"GET","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ec13add7-47eb-4b22-b026-11fa4e572217",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ec13add7-47eb-4b22-b026-11fa4e572217",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/auth-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebc71e3c-58f3-4dcc-a597-c1daecef9e3a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43408","PortSpecifier":{"PortValue":43408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","method":"GET","path":"/maas-api/v1/api-keys/ec13add7-47eb-4b22-b026-11fa4e572217","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43408","PortSpecifier":{"PortValue":43408}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358516,"nanos":198778160},"http":{"id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","method":"GET","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ec13add7-47eb-4b22-b026-11fa4e572217",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ec13add7-47eb-4b22-b026-11fa4e572217",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:21:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dcc9734-5e36-4b07-b955-c31bd1a6a860","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41718","PortSpecifier":{"PortValue":41718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c040c60-c96c-4d76-944f-6aab97f394e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41718","PortSpecifier":{"PortValue":41718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358533,"nanos":357788246},"http":{"id":"9c040c60-c96c-4d76-944f-6aab97f394e1","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c040c60-c96c-4d76-944f-6aab97f394e1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66616559-9107-408e-b20e-4248417c3f40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55224","PortSpecifier":{"PortValue":55224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66616559-9107-408e-b20e-4248417c3f40","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66616559-9107-408e-b20e-4248417c3f40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55224","PortSpecifier":{"PortValue":55224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358533,"nanos":394276640},"http":{"id":"66616559-9107-408e-b20e-4248417c3f40","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66616559-9107-408e-b20e-4248417c3f40","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66616559-9107-408e-b20e-4248417c3f40","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66616559-9107-408e-b20e-4248417c3f40","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66616559-9107-408e-b20e-4248417c3f40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66616559-9107-408e-b20e-4248417c3f40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66616559-9107-408e-b20e-4248417c3f40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/auth-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66616559-9107-408e-b20e-4248417c3f40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66616559-9107-408e-b20e-4248417c3f40","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66616559-9107-408e-b20e-4248417c3f40","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66616559-9107-408e-b20e-4248417c3f40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66616559-9107-408e-b20e-4248417c3f40","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41732","PortSpecifier":{"PortValue":41732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65df4946-aaeb-44a3-9e74-62598f388fc5","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41732","PortSpecifier":{"PortValue":41732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358533,"nanos":431846925},"http":{"id":"65df4946-aaeb-44a3-9e74-62598f388fc5","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1XYlB3r1PLGcJ8sbH_ageaB1rZXEietHcujOrvm5Gixpnz2kDlaZEfLIHRtRQ"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1XYlB3r1PLGcJ8sbH_ageaB1rZXEietHcujOrvm5Gixpnz2kDlaZEfLIHRtRQ\"}"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5e555ad3-6547-4b0f-8426-fcc33a210b38","keyName":"e2e-auth-iso-a-551b6b","subscription":"e2e-auth-iso-743c22","tenant":"e2e-shared-a-2cd1eb","userId":"5e555ad3-6547-4b0f-8426-fcc33a210b38","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/auth-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-743c22"} {"level":"info","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:22:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65df4946-aaeb-44a3-9e74-62598f388fc5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91ca1ea7b7a875ebade67d4d578270146052809f4d49a8c50f0ba471b6fb193d"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52c6ae8cd867e9a50543d8b815304bb394ce14cd3131b82cb742378f6065767e"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/43fc997fcf1c429f2f1101b15ae5e3b10b7cc4742e9a35c6cf608ec373c7f1cb"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a768f941456f432c57da45078d30d6b9ed3e46f9140b4e42bc19073dfc7d2655"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5bcd0138020c8ee5757965d6dd951ab2545e7c8b2e8ae4f7443fe29ac0fac1f4"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df5839604ab615a1d8ad4cb2b6fa699292521dc452ee9bd1b77e92ee9d4bbacd"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6ec8f2060f73cb9fa8edbc9cb2478a3d3c408d9049e3a98728cd82a5d32e694"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f3b4d8e96d6688a1ca85cbf81358e723dfffc9840871cb8bc5673095c1855f1"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2513aed16e8b2a1288f68294ecd8b7e5096979f49de2840a763cda24073c8cdd"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe946ad2eb5a932d909dc9afe1ff9d5c03a02cc00d9fa75afb063144c011cdc6"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7595fb3303a3a28c2e376523e527a9fe21ec3b436a1a77c3d2a3f949136c7d70"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91825384682cfc35d302c6e198365dba67569e1b5d4f597f724b6f6f561097e1"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09c705e344e416dfa756b1b0e370923878de6cd1d040b59d374da9a442abf92f"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5300b2a405f07f06b83234ae976261b9ce4a6699a2fdc0a660dc3a1e7a7df5e"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/966975dc29899af29f85e09c78fbeda4113d9bad058553db8270f0cb06846235"} {"level":"info","ts":"2026-07-06T17:22:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd8a30f92f7e9a7fe346e880d1248e0f5e321ca911866a1d731db7463f88c40d"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"error","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"} {"level":"error","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"debug","ts":"2026-07-06T17:22:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:22:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"error","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:22:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb"} {"level":"info","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb"} {"level":"debug","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb"} {"level":"debug","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985"} {"level":"debug","ts":"2026-07-06T17:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985"} {"level":"debug","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985"} {"level":"debug","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985"} {"level":"debug","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"debug","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"debug","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb"} {"level":"info","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb"} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb"} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"debug","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616"} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985"} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"} {"level":"info","ts":"2026-07-06T17:23:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51726","PortSpecifier":{"PortValue":51726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d055123-f0cc-46fa-9251-d9428227d87b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51726","PortSpecifier":{"PortValue":51726}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358604,"nanos":394191715},"http":{"id":"1d055123-f0cc-46fa-9251-d9428227d87b","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/sub-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d055123-f0cc-46fa-9251-d9428227d87b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46276","PortSpecifier":{"PortValue":46276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46276","PortSpecifier":{"PortValue":46276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358604,"nanos":438274432},"http":{"id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/sub-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bfbd5b39-3ad0-4fad-86a9-215a74677638","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"820b67e2-d99f-4261-815d-e64f2261844c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51730","PortSpecifier":{"PortValue":51730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"820b67e2-d99f-4261-815d-e64f2261844c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"820b67e2-d99f-4261-815d-e64f2261844c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:51730","PortSpecifier":{"PortValue":51730}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358604,"nanos":472634788},"http":{"id":"820b67e2-d99f-4261-815d-e64f2261844c","method":"GET","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"820b67e2-d99f-4261-815d-e64f2261844c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5TfZ6xhBDXLghFxS_HGHepNeWdXCQNx38FAAenH9VengCEboHFPwhjemwaWA"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"820b67e2-d99f-4261-815d-e64f2261844c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5TfZ6xhBDXLghFxS_HGHepNeWdXCQNx38FAAenH9VengCEboHFPwhjemwaWA\"}"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"820b67e2-d99f-4261-815d-e64f2261844c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"86f9c70b-7d62-4e11-bcfb-065dbcba9680","keyName":"e2e-sub-iso-a87157","subscription":"e2e-a-only-93e690","tenant":"e2e-shared-a-2cd1eb","userId":"86f9c70b-7d62-4e11-bcfb-065dbcba9680","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"820b67e2-d99f-4261-815d-e64f2261844c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"820b67e2-d99f-4261-815d-e64f2261844c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"820b67e2-d99f-4261-815d-e64f2261844c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"820b67e2-d99f-4261-815d-e64f2261844c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/sub-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"820b67e2-d99f-4261-815d-e64f2261844c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"820b67e2-d99f-4261-815d-e64f2261844c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-93e690"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"820b67e2-d99f-4261-815d-e64f2261844c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"820b67e2-d99f-4261-815d-e64f2261844c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"820b67e2-d99f-4261-815d-e64f2261844c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"820b67e2-d99f-4261-815d-e64f2261844c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46280","PortSpecifier":{"PortValue":46280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46280","PortSpecifier":{"PortValue":46280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358604,"nanos":512843603},"http":{"id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","method":"GET","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16E3Rvte1nwtZ4R3L_9XHhLaAf5Zvz74wBCWCJwR3EFmfiwn0bxFG81wmyn4h"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0ebdd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16E3Rvte1nwtZ4R3L_9XHhLaAf5Zvz74wBCWCJwR3EFmfiwn0bxFG81wmyn4h\"}"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0ebdd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dde0ee14-4243-45aa-aa34-81916f4bf560","keyName":"e2e-sub-iso-3495a8","subscription":"e2e-b-only-93e690","tenant":"e2e-shared-b-0ebdd9","userId":"dde0ee14-4243-45aa-aa34-81916f4bf560","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/sub-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-93e690"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:23:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1f12eaf-346c-4dee-bfd9-4440c972b051","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46654","PortSpecifier":{"PortValue":46654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46654","PortSpecifier":{"PortValue":46654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358623,"nanos":109534613},"http":{"id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/sub-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e2e4ae9-d75c-455d-9af1-adcd5a3116b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6de75afb-ad47-4023-a492-50ee967f5429","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60940","PortSpecifier":{"PortValue":60940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6de75afb-ad47-4023-a492-50ee967f5429","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6de75afb-ad47-4023-a492-50ee967f5429","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60940","PortSpecifier":{"PortValue":60940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358623,"nanos":149155977},"http":{"id":"6de75afb-ad47-4023-a492-50ee967f5429","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6de75afb-ad47-4023-a492-50ee967f5429","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6de75afb-ad47-4023-a492-50ee967f5429","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6de75afb-ad47-4023-a492-50ee967f5429","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de75afb-ad47-4023-a492-50ee967f5429","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de75afb-ad47-4023-a492-50ee967f5429","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6de75afb-ad47-4023-a492-50ee967f5429","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/sub-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6de75afb-ad47-4023-a492-50ee967f5429","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de75afb-ad47-4023-a492-50ee967f5429","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6de75afb-ad47-4023-a492-50ee967f5429","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6de75afb-ad47-4023-a492-50ee967f5429","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6de75afb-ad47-4023-a492-50ee967f5429","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46656","PortSpecifier":{"PortValue":46656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46656","PortSpecifier":{"PortValue":46656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358623,"nanos":180194612},"http":{"id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18XMeK6uBOYdODSMA_NZZ4YJowGXfi4HaGGvKFeKbSOCdBQAkG3WUY2xc33gz"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18XMeK6uBOYdODSMA_NZZ4YJowGXfi4HaGGvKFeKbSOCdBQAkG3WUY2xc33gz\"}"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3b39130e-5c5b-4fb1-a240-d6f73033f966","keyName":"e2e-sub-iso-83fa03","subscription":"e2e-shared-sub-9dafc1","tenant":"e2e-shared-a-2cd1eb","userId":"3b39130e-5c5b-4fb1-a240-d6f73033f966","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/sub-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9dafc1"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ab3732d-cdc8-4456-a02a-d9b8d8da8935","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60944","PortSpecifier":{"PortValue":60944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:60944","PortSpecifier":{"PortValue":60944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358623,"nanos":209619432},"http":{"id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-12v3psE0ZCpjZeayi_9aPcn0GrXWYxO4O3pbUXcrmL7YNEmbFXArsPdsXxybu"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0ebdd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-12v3psE0ZCpjZeayi_9aPcn0GrXWYxO4O3pbUXcrmL7YNEmbFXArsPdsXxybu\"}"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0ebdd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dbe1d598-2cfc-4c8e-b6d4-4a080d372e5f","keyName":"e2e-sub-iso-d19aab","subscription":"e2e-shared-sub-9dafc1","tenant":"e2e-shared-b-0ebdd9","userId":"dbe1d598-2cfc-4c8e-b6d4-4a080d372e5f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/sub-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-9dafc1"} {"level":"info","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:23:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d86aeaf8-52a3-46ba-a718-6c5e1ec25967","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:23:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/375be1c12cad1387e9e96e47b58ff4be46bcb93386ca53b7130f1177ef6305e3"} {"level":"info","ts":"2026-07-06T17:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccf13402c565788ae2907ddf3aae8328ec88a77c751640e1ac727d66e524a850"} {"level":"info","ts":"2026-07-06T17:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57bc5235a7f600f9bd791130921b9048f3cdc922c53ee2b472f884fd5535d1ab"} {"level":"info","ts":"2026-07-06T17:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd7c6e13a8c3f7ec94998cb25f0ed9e6246988d1b87b8f6e538ab4aab0bb6415"} {"level":"info","ts":"2026-07-06T17:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45bc7473829a2f6eea7d2f3ec2ff49edfda7d9302a785ab078eb61a878333a5f"} {"level":"info","ts":"2026-07-06T17:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b0455b094b00b50d80f28dfe095db674aa83b830213aea046a5803e553a0a4c"} {"level":"info","ts":"2026-07-06T17:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f3985e134a79f3a03c3febd389da74010aca7563a338592c9df8bb3573424736"} {"level":"info","ts":"2026-07-06T17:23:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1fa3dddd6fac2c09a26b721dbfc742c43b1bc4cb3cc5279b822f0af259cfaf70"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f"} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f"} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3"} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"} {"level":"info","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3"} {"level":"error","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560"} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9ed31ac96f6f11209259325de12dbba3d96dfbea6fd02f3edbe961884328f58"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e6ea28fea5119f955e6709f2f80875bcc284ebfd81a08e544f8e8d2eb29535e"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/888b83160b836d665f7853b70ee1e1fd0153fc56261ef6d0ff22c1452ce7aafb"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/02055e4432db8c0aa955603503ddc0543381a0e266e35ab8cf004e82d06152a9"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e5bf21946f69dd76f9c6bbdb695f2452dd1463426869417ac4632d6c1cc9985"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e524365ec3a2ff57da1001f718f855ad6aec9b40cec3c60d2dd92fa8b11aa448"} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:23:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/754b96f13d3e5c144a8d1acdc3e480d54d1bc417cece608c474008ade5c88511"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/665e0162bf6e8fca7260ace94f72f86d014468aa7ebf8c433d6fc61c9b244542"} {"level":"info","ts":"2026-07-06T17:23:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:26Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"error","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"} {"level":"debug","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b"} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"error","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b"} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"debug","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741"} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T17:24:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"} {"level":"debug","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"info","ts":"2026-07-06T17:24:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560"} {"level":"info","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41074","PortSpecifier":{"PortValue":41074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41074","PortSpecifier":{"PortValue":41074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358684,"nanos":279371024},"http":{"id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0b94672-4669-4ec8-a397-c8f69499e0b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16525126-911c-4801-bb88-2b40c1f882a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56022","PortSpecifier":{"PortValue":56022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16525126-911c-4801-bb88-2b40c1f882a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16525126-911c-4801-bb88-2b40c1f882a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56022","PortSpecifier":{"PortValue":56022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358684,"nanos":322306428},"http":{"id":"16525126-911c-4801-bb88-2b40c1f882a6","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16525126-911c-4801-bb88-2b40c1f882a6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16525126-911c-4801-bb88-2b40c1f882a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16525126-911c-4801-bb88-2b40c1f882a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16525126-911c-4801-bb88-2b40c1f882a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16525126-911c-4801-bb88-2b40c1f882a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16525126-911c-4801-bb88-2b40c1f882a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/rate-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16525126-911c-4801-bb88-2b40c1f882a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16525126-911c-4801-bb88-2b40c1f882a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16525126-911c-4801-bb88-2b40c1f882a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16525126-911c-4801-bb88-2b40c1f882a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16525126-911c-4801-bb88-2b40c1f882a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41086","PortSpecifier":{"PortValue":41086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","method":"POST","path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41086","PortSpecifier":{"PortValue":41086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358684,"nanos":362911940},"http":{"id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dW4SuPRN8HrBUiRd_SiWer2Or3t5RqglruBp5EN9LIyF7khP7A7wi6Fc8ynk"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dW4SuPRN8HrBUiRd_SiWer2Or3t5RqglruBp5EN9LIyF7khP7A7wi6Fc8ynk\"}"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8921e52-55a4-4e32-9004-108e3a29cc54","keyName":"e2e-rate-a-561d9e","subscription":"e2e-rate-iso-a-561d9e","tenant":"e2e-shared-a-2cd1eb","userId":"e8921e52-55a4-4e32-9004-108e3a29cc54","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\",\"requestedSubscription\":\"e2e-rate-iso-a-561d9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-561d9e","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-561d9e"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8921e52-55a4-4e32-9004-108e3a29cc54","keyName":"e2e-rate-a-561d9e","selected_subscription":"e2e-rate-iso-a-561d9e","selected_subscription_key":"ai-tenant-e2e-shared-a-2cd1eb/e2e-rate-iso-a-561d9e@ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-561d9e","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b6a5b9e3-0a8b-4d89-a338-409b148b6245","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40074","PortSpecifier":{"PortValue":40074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","method":"POST","path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40074","PortSpecifier":{"PortValue":40074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358685,"nanos":426883206},"http":{"id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dW4SuPRN8HrBUiRd_SiWer2Or3t5RqglruBp5EN9LIyF7khP7A7wi6Fc8ynk"} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dW4SuPRN8HrBUiRd_SiWer2Or3t5RqglruBp5EN9LIyF7khP7A7wi6Fc8ynk\"}"} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8921e52-55a4-4e32-9004-108e3a29cc54","keyName":"e2e-rate-a-561d9e","subscription":"e2e-rate-iso-a-561d9e","tenant":"e2e-shared-a-2cd1eb","userId":"e8921e52-55a4-4e32-9004-108e3a29cc54","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\",\"requestedSubscription\":\"e2e-rate-iso-a-561d9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-561d9e","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-561d9e"} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8921e52-55a4-4e32-9004-108e3a29cc54","keyName":"e2e-rate-a-561d9e","selected_subscription":"e2e-rate-iso-a-561d9e","selected_subscription_key":"ai-tenant-e2e-shared-a-2cd1eb/e2e-rate-iso-a-561d9e@ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-561d9e","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1af2289c-5bc4-4aba-9b4b-9230b5e6d522","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40086","PortSpecifier":{"PortValue":40086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","method":"POST","path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40086","PortSpecifier":{"PortValue":40086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358686,"nanos":467399174},"http":{"id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dW4SuPRN8HrBUiRd_SiWer2Or3t5RqglruBp5EN9LIyF7khP7A7wi6Fc8ynk"} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dW4SuPRN8HrBUiRd_SiWer2Or3t5RqglruBp5EN9LIyF7khP7A7wi6Fc8ynk\"}"} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e8921e52-55a4-4e32-9004-108e3a29cc54","keyName":"e2e-rate-a-561d9e","subscription":"e2e-rate-iso-a-561d9e","tenant":"e2e-shared-a-2cd1eb","userId":"e8921e52-55a4-4e32-9004-108e3a29cc54","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\",\"requestedSubscription\":\"e2e-rate-iso-a-561d9e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-561d9e","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-561d9e"} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e8921e52-55a4-4e32-9004-108e3a29cc54","keyName":"e2e-rate-a-561d9e","selected_subscription":"e2e-rate-iso-a-561d9e","selected_subscription_key":"ai-tenant-e2e-shared-a-2cd1eb/e2e-rate-iso-a-561d9e@ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-561d9e","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fee6c411-6d0f-467c-a689-4a3531b5c4ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47360","PortSpecifier":{"PortValue":47360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27b89b48-6e58-4391-a873-6500ef8adea9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47360","PortSpecifier":{"PortValue":47360}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358697,"nanos":337073210},"http":{"id":"27b89b48-6e58-4391-a873-6500ef8adea9","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.49:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27b89b48-6e58-4391-a873-6500ef8adea9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39944","PortSpecifier":{"PortValue":39944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39944","PortSpecifier":{"PortValue":39944}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358697,"nanos":375565598},"http":{"id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4183204e-a756-4ae2-bba5-874994c95c3f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"]}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bbaa274e47e6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=a7069c30-391a-4b04-afd4-90f5e8f6d507"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4183204e-a756-4ae2-bba5-874994c95c3f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/rate-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e0068df-0c90-4d07-8ef3-4b420ad39f11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","method":"POST","path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47372","PortSpecifier":{"PortValue":47372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358697,"nanos":414735891},"http":{"id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qEIVf77OfeMFuCCs_ZHW8WkwrakLHquTkyerHTdTgq3Iywkgv06mR2ZZsrh7"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qEIVf77OfeMFuCCs_ZHW8WkwrakLHquTkyerHTdTgq3Iywkgv06mR2ZZsrh7\"}"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e0bbc5a4-c01a-49ff-8f82-59caf6358a18","keyName":"e2e-rate-a-24964f","subscription":"e2e-rate-iso-a-24964f","tenant":"e2e-shared-a-2cd1eb","userId":"e0bbc5a4-c01a-49ff-8f82-59caf6358a18","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\",\"requestedSubscription\":\"e2e-rate-iso-a-24964f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-24964f","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-24964f"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e0bbc5a4-c01a-49ff-8f82-59caf6358a18","keyName":"e2e-rate-a-24964f","selected_subscription":"e2e-rate-iso-a-24964f","selected_subscription_key":"ai-tenant-e2e-shared-a-2cd1eb/e2e-rate-iso-a-24964f@ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-24964f","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"59696d33-5eac-4fde-aa64-bcb9e761d5e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0370f212-0b22-439b-87bb-235836b102af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47382","PortSpecifier":{"PortValue":47382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0370f212-0b22-439b-87bb-235836b102af","method":"POST","path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0370f212-0b22-439b-87bb-235836b102af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47382","PortSpecifier":{"PortValue":47382}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358698,"nanos":450886515},"http":{"id":"0370f212-0b22-439b-87bb-235836b102af","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qEIVf77OfeMFuCCs_ZHW8WkwrakLHquTkyerHTdTgq3Iywkgv06mR2ZZsrh7"} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0370f212-0b22-439b-87bb-235836b102af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qEIVf77OfeMFuCCs_ZHW8WkwrakLHquTkyerHTdTgq3Iywkgv06mR2ZZsrh7\"}"} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e0bbc5a4-c01a-49ff-8f82-59caf6358a18","keyName":"e2e-rate-a-24964f","subscription":"e2e-rate-iso-a-24964f","tenant":"e2e-shared-a-2cd1eb","userId":"e0bbc5a4-c01a-49ff-8f82-59caf6358a18","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0370f212-0b22-439b-87bb-235836b102af","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\",\"requestedSubscription\":\"e2e-rate-iso-a-24964f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-24964f","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0370f212-0b22-439b-87bb-235836b102af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-24964f"} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0370f212-0b22-439b-87bb-235836b102af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e0bbc5a4-c01a-49ff-8f82-59caf6358a18","keyName":"e2e-rate-a-24964f","selected_subscription":"e2e-rate-iso-a-24964f","selected_subscription_key":"ai-tenant-e2e-shared-a-2cd1eb/e2e-rate-iso-a-24964f@ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-24964f","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0370f212-0b22-439b-87bb-235836b102af","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0370f212-0b22-439b-87bb-235836b102af","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47386","PortSpecifier":{"PortValue":47386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"444dec8c-7341-4b5f-989d-76c327ba76c0","method":"POST","path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions","host":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47386","PortSpecifier":{"PortValue":47386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.49:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358699,"nanos":486770695},"http":{"id":"444dec8c-7341-4b5f-989d-76c327ba76c0","method":"POST","headers":{":authority":"e2e-shared-a-2cd1eb.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qEIVf77OfeMFuCCs_ZHW8WkwrakLHquTkyerHTdTgq3Iywkgv06mR2ZZsrh7"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qEIVf77OfeMFuCCs_ZHW8WkwrakLHquTkyerHTdTgq3Iywkgv06mR2ZZsrh7\"}"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e0bbc5a4-c01a-49ff-8f82-59caf6358a18","keyName":"e2e-rate-a-24964f","subscription":"e2e-rate-iso-a-24964f","tenant":"e2e-shared-a-2cd1eb","userId":"e0bbc5a4-c01a-49ff-8f82-59caf6358a18","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\",\"requestedSubscription\":\"e2e-rate-iso-a-24964f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cd1eb.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-24964f","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-24964f"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"e0bbc5a4-c01a-49ff-8f82-59caf6358a18","keyName":"e2e-rate-a-24964f","selected_subscription":"e2e-rate-iso-a-24964f","selected_subscription_key":"ai-tenant-e2e-shared-a-2cd1eb/e2e-rate-iso-a-24964f@ai-tenant-e2e-shared-a-2cd1eb/rate-test-model-2cd1eb","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cd1eb","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-24964f","namespace":"ai-tenant-e2e-shared-a-2cd1eb","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"444dec8c-7341-4b5f-989d-76c327ba76c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39948","PortSpecifier":{"PortValue":39948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","method":"POST","path":"/ai-tenant-e2e-shared-b-0ebdd9/rate-test-model-0ebdd9/v1/completions","host":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39948","PortSpecifier":{"PortValue":39948}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783358699,"nanos":523206975},"http":{"id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","method":"POST","headers":{":authority":"e2e-shared-b-0ebdd9.apps.13c51b61-ecf1-473d-8d30-bbaa274e47e6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-0ebdd9/rate-test-model-0ebdd9/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-k9JTXy9m4dC9dY6A_YVfrOEOC3RFYWJVG2l3ZAFd4wLXob1Q13M4WtgkQN1k"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-0ebdd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-k9JTXy9m4dC9dY6A_YVfrOEOC3RFYWJVG2l3ZAFd4wLXob1Q13M4WtgkQN1k\"}"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0ebdd9.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"73a1e0fd-dd53-4c22-a479-afa59d68d0f5","keyName":"e2e-rate-b-24964f","subscription":"e2e-rate-iso-b-24964f","tenant":"e2e-shared-b-0ebdd9","userId":"73a1e0fd-dd53-4c22-a479-afa59d68d0f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-0ebdd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-0ebdd9/rate-test-model-0ebdd9\",\"requestedSubscription\":\"e2e-rate-iso-b-24964f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-0ebdd9.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-0ebdd9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-24964f","namespace":"ai-tenant-e2e-shared-b-0ebdd9","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-0ebdd9/rate-test-model-0ebdd9\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-24964f"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"73a1e0fd-dd53-4c22-a479-afa59d68d0f5","keyName":"e2e-rate-b-24964f","selected_subscription":"e2e-rate-iso-b-24964f","selected_subscription_key":"ai-tenant-e2e-shared-b-0ebdd9/e2e-rate-iso-b-24964f@ai-tenant-e2e-shared-b-0ebdd9/rate-test-model-0ebdd9","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-0ebdd9","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-24964f","namespace":"ai-tenant-e2e-shared-b-0ebdd9","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T17:24:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"638fb3ea-e39e-402d-b469-43fcd7f62e84","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed65b8899dba4580bcb9a7369456471254a30478ea45fde42ee8229ae553c2c3"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/801973b15dc531a0a071a3780c8b6c3f3980ac4faa6060ffa909962275bae5bf"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b064f0e755b28d628544400c2ba48678088036decb3d9841f0e296563b79d264"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/924c6c1e83dc31b0eecef074de1c88152580c44e801dda0ad1dc209c7ceb2616"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2897d32533f50a527b18589ac9117b951fe00ba46409e0d589e413d9fbcc00d1"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/872f9979204a99a6582e717d89ced78d730527c91edfccbb865295cdd6ccbf1f"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca15fcc0a91b1e7f1382a6523559628b5e50caea101b7d83e7778e3e8ae69a4e"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53cbe1f399deede101ea7547b78ab01e92c813af691c5014b11e71d2157208e0"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c62f9161fdf44ab449edc4d7b7365550a1c3d9f7952767a6f8896da97ed9e560"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/00cf25020b3320404430a1f63f5067cc09d78e38e53f24573c5ae9080028ad08"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adbcef760d852427f26a7d0319ebe268f25f3ec8e584d8fbac823d2e479c953b"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45ba73f5973ce905416019f86e53d51c0b0ee68ebe8bc7f799c74439d5df0b71"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2b213af0a9264f1a98e1b6e87414c292e038555955ceaa0c3c7d4d554b6d9e8"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e258b158503e3926382fbc0d7cf2398e378bb6533b95129d6bbc855e133f5966"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28cd0916074986a4da763cf3fa7700a662211f8c58414082276b526a71518861"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d851287844255c22a688d38b2485f5f227c73fe5f2576822bf74b47c6ded741"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4186d794c22ed6a4e2bf0096d4d9c5052e5352b3424d6b56f10b0cf30c2d58b7"} {"level":"info","ts":"2026-07-06T17:25:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75e89c4d5a0005dce14476bd452b8813f467a94a954c940969de647a32137c9f"} {"level":"info","ts":"2026-07-06T17:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a489e180df8c5ab802cc26ddee7d3562e5d1eb5efb1097131fddd5c8814715e"} {"level":"info","ts":"2026-07-06T17:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e157fea379965954008ba144aab035be9e7e484e45a074dcc5cafc61d4650f3d"}