--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de74d1816daa51a1ef7378274fc1ece737adefa4e94b192236c6d3ba60a85073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de74d1816daa51a1ef7378274fc1ece737adefa4e94b192236c6d3ba60a85073"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de74d1816daa51a1ef7378274fc1ece737adefa4e94b192236c6d3ba60a85073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de74d1816daa51a1ef7378274fc1ece737adefa4e94b192236c6d3ba60a85073","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de74d1816daa51a1ef7378274fc1ece737adefa4e94b192236c6d3ba60a85073"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de74d1816daa51a1ef7378274fc1ece737adefa4e94b192236c6d3ba60a85073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45fbb1a2678ebd9d0c100a9c47d74cb5e3d5e79271f44b43d69a2b41de979e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de74d1816daa51a1ef7378274fc1ece737adefa4e94b192236c6d3ba60a85073"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45fbb1a2678ebd9d0c100a9c47d74cb5e3d5e79271f44b43d69a2b41de979e77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de74d1816daa51a1ef7378274fc1ece737adefa4e94b192236c6d3ba60a85073","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45fbb1a2678ebd9d0c100a9c47d74cb5e3d5e79271f44b43d69a2b41de979e77"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45fbb1a2678ebd9d0c100a9c47d74cb5e3d5e79271f44b43d69a2b41de979e77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45fbb1a2678ebd9d0c100a9c47d74cb5e3d5e79271f44b43d69a2b41de979e77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45fbb1a2678ebd9d0c100a9c47d74cb5e3d5e79271f44b43d69a2b41de979e77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde2ed6e5dfaa7e0a97848991d6cc174bca6f3a8b4d7bf18972c2cbbcbc4274c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45fbb1a2678ebd9d0c100a9c47d74cb5e3d5e79271f44b43d69a2b41de979e77"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde2ed6e5dfaa7e0a97848991d6cc174bca6f3a8b4d7bf18972c2cbbcbc4274c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45fbb1a2678ebd9d0c100a9c47d74cb5e3d5e79271f44b43d69a2b41de979e77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde2ed6e5dfaa7e0a97848991d6cc174bca6f3a8b4d7bf18972c2cbbcbc4274c"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde2ed6e5dfaa7e0a97848991d6cc174bca6f3a8b4d7bf18972c2cbbcbc4274c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde2ed6e5dfaa7e0a97848991d6cc174bca6f3a8b4d7bf18972c2cbbcbc4274c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde2ed6e5dfaa7e0a97848991d6cc174bca6f3a8b4d7bf18972c2cbbcbc4274c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde2ed6e5dfaa7e0a97848991d6cc174bca6f3a8b4d7bf18972c2cbbcbc4274c"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1accd8a441da02da4779c84c2fc358ddf6071dc91414a1397df3708fbdcc188d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1accd8a441da02da4779c84c2fc358ddf6071dc91414a1397df3708fbdcc188d"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde2ed6e5dfaa7e0a97848991d6cc174bca6f3a8b4d7bf18972c2cbbcbc4274c"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1accd8a441da02da4779c84c2fc358ddf6071dc91414a1397df3708fbdcc188d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde2ed6e5dfaa7e0a97848991d6cc174bca6f3a8b4d7bf18972c2cbbcbc4274c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1accd8a441da02da4779c84c2fc358ddf6071dc91414a1397df3708fbdcc188d"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1accd8a441da02da4779c84c2fc358ddf6071dc91414a1397df3708fbdcc188d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1accd8a441da02da4779c84c2fc358ddf6071dc91414a1397df3708fbdcc188d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1accd8a441da02da4779c84c2fc358ddf6071dc91414a1397df3708fbdcc188d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1accd8a441da02da4779c84c2fc358ddf6071dc91414a1397df3708fbdcc188d"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1accd8a441da02da4779c84c2fc358ddf6071dc91414a1397df3708fbdcc188d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"debug","ts":"2026-07-16T22:39:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"} {"level":"debug","ts":"2026-07-16T22:39:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0"} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08"} {"level":"debug","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08"} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08"} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08"} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1"} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08"} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1"} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0"} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0"} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:39:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0"} {"level":"error","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:39:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52000","PortSpecifier":{"PortValue":52000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52000","PortSpecifier":{"PortValue":52000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241557,"nanos":484554799},"http":{"id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afbd84d2-c10f-4511-a2cd-80c1074ac95b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59250","PortSpecifier":{"PortValue":59250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59250","PortSpecifier":{"PortValue":59250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241557,"nanos":547562590},"http":{"id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/auth-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b37ca9f-26c4-46c3-a469-31499cf9208b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52004","PortSpecifier":{"PortValue":52004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","method":"GET","path":"/maas-api/v1/api-keys/985c8642-f322-4eb6-a6d1-ea103237f152","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52004","PortSpecifier":{"PortValue":52004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241557,"nanos":612324260},"http":{"id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","method":"GET","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/985c8642-f322-4eb6-a6d1-ea103237f152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/985c8642-f322-4eb6-a6d1-ea103237f152",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89d80f2a-8b5b-48ff-a045-d91e0e845809","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59266","PortSpecifier":{"PortValue":59266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b77c130e-1d28-4490-938d-f9294d9ee603","method":"GET","path":"/maas-api/v1/api-keys/17a9ba48-0832-41b6-b48c-027a9d925598","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:59266","PortSpecifier":{"PortValue":59266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241557,"nanos":642898775},"http":{"id":"b77c130e-1d28-4490-938d-f9294d9ee603","method":"GET","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/17a9ba48-0832-41b6-b48c-027a9d925598",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/17a9ba48-0832-41b6-b48c-027a9d925598",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/auth-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b77c130e-1d28-4490-938d-f9294d9ee603","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37114","PortSpecifier":{"PortValue":37114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48d910bc-d525-4218-82d7-73e5c51d02c7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37114","PortSpecifier":{"PortValue":37114}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241576,"nanos":839021179},"http":{"id":"48d910bc-d525-4218-82d7-73e5c51d02c7","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48d910bc-d525-4218-82d7-73e5c51d02c7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34904","PortSpecifier":{"PortValue":34904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:34904","PortSpecifier":{"PortValue":34904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241576,"nanos":881545514},"http":{"id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/auth-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42903d3b-9fc5-4c44-9e23-0e2e345a4b88","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37118","PortSpecifier":{"PortValue":37118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37118","PortSpecifier":{"PortValue":37118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241576,"nanos":922421765},"http":{"id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","method":"GET","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vvofU0yLfiBWizQw_XoPMD7wtesOq6xurF7eqov42ngZ9vUoSi0vjVRLps5w"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vvofU0yLfiBWizQw_XoPMD7wtesOq6xurF7eqov42ngZ9vUoSi0vjVRLps5w\"}"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"ea62176b-f27e-4277-8800-5102f82fbb06","keyName":"e2e-auth-iso-a-0ead9c","subscription":"e2e-auth-iso-6de571","tenant":"e2e-shared-a-1c9596","userId":"ea62176b-f27e-4277-8800-5102f82fbb06","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6de571"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:39:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"234002a0-9ad6-4d3c-80b9-4d5a53fda430","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36544","PortSpecifier":{"PortValue":36544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:39:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36544","PortSpecifier":{"PortValue":36544}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241593,"nanos":991261941},"http":{"id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:39:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd58de12-463e-4bf9-821e-22d2c6c41dae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43420","PortSpecifier":{"PortValue":43420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43420","PortSpecifier":{"PortValue":43420}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241594,"nanos":23346934},"http":{"id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/auth-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4660da41-c1ee-4023-aa1e-040ac4d6fd1f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cca606db-c824-4e01-97e8-81dc278110c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43436","PortSpecifier":{"PortValue":43436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cca606db-c824-4e01-97e8-81dc278110c6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cca606db-c824-4e01-97e8-81dc278110c6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:43436","PortSpecifier":{"PortValue":43436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241594,"nanos":56489213},"http":{"id":"cca606db-c824-4e01-97e8-81dc278110c6","method":"GET","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cca606db-c824-4e01-97e8-81dc278110c6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ug42U6xwk2kSbiCq_KVRI5cYnfHcEkjqNJZwkAeeGSfAmF0j2bh8t0uEPcrF"} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cca606db-c824-4e01-97e8-81dc278110c6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7d2f73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ug42U6xwk2kSbiCq_KVRI5cYnfHcEkjqNJZwkAeeGSfAmF0j2bh8t0uEPcrF\"}"} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cca606db-c824-4e01-97e8-81dc278110c6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7d2f73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cca606db-c824-4e01-97e8-81dc278110c6","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cca606db-c824-4e01-97e8-81dc278110c6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"cca606db-c824-4e01-97e8-81dc278110c6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cca606db-c824-4e01-97e8-81dc278110c6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-16T22:39:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cca606db-c824-4e01-97e8-81dc278110c6","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44784","PortSpecifier":{"PortValue":44784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc343d9d-b394-46c6-911f-22f881cc96e4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44784","PortSpecifier":{"PortValue":44784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241611,"nanos":129567944},"http":{"id":"dc343d9d-b394-46c6-911f-22f881cc96e4","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc343d9d-b394-46c6-911f-22f881cc96e4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41590","PortSpecifier":{"PortValue":41590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41590","PortSpecifier":{"PortValue":41590}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241611,"nanos":166420669},"http":{"id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/auth-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9bf08a43-081c-4f96-86f0-d878cd6b6f8d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44798","PortSpecifier":{"PortValue":44798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f0ea360-fb08-4008-b8fa-502c920c337e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44798","PortSpecifier":{"PortValue":44798}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241611,"nanos":204061612},"http":{"id":"3f0ea360-fb08-4008-b8fa-502c920c337e","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f0ea360-fb08-4008-b8fa-502c920c337e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41598","PortSpecifier":{"PortValue":41598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:41598","PortSpecifier":{"PortValue":41598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241611,"nanos":238958694},"http":{"id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/auth-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a670ef6-7bde-4261-be6f-7f7aaa9dcfad","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f668655-db03-4aaf-966b-5c365642c637","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48914","PortSpecifier":{"PortValue":48914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0f668655-db03-4aaf-966b-5c365642c637","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0f668655-db03-4aaf-966b-5c365642c637","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48914","PortSpecifier":{"PortValue":48914}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241633,"nanos":493821780},"http":{"id":"0f668655-db03-4aaf-966b-5c365642c637","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0f668655-db03-4aaf-966b-5c365642c637","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0f668655-db03-4aaf-966b-5c365642c637","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0f668655-db03-4aaf-966b-5c365642c637","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f668655-db03-4aaf-966b-5c365642c637","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f668655-db03-4aaf-966b-5c365642c637","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0f668655-db03-4aaf-966b-5c365642c637","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0f668655-db03-4aaf-966b-5c365642c637","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f668655-db03-4aaf-966b-5c365642c637","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0f668655-db03-4aaf-966b-5c365642c637","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f668655-db03-4aaf-966b-5c365642c637","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0f668655-db03-4aaf-966b-5c365642c637","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42868","PortSpecifier":{"PortValue":42868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42868","PortSpecifier":{"PortValue":42868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241633,"nanos":528106536},"http":{"id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/auth-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e1fcfc78-7159-4451-9b0c-ecfcc7974cf1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42880","PortSpecifier":{"PortValue":42880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","method":"GET","path":"/maas-api/v1/api-keys/249be7f3-dab5-4c34-bae4-a71142b8ffed","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42880","PortSpecifier":{"PortValue":42880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241633,"nanos":565084793},"http":{"id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","method":"GET","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/249be7f3-dab5-4c34-bae4-a71142b8ffed",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/249be7f3-dab5-4c34-bae4-a71142b8ffed",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/auth-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27439034-4c5c-4bb7-818f-9d8a0c0db574","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48930","PortSpecifier":{"PortValue":48930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9768552e-c8ed-4269-b2f1-cce77730acbf","method":"GET","path":"/maas-api/v1/api-keys/249be7f3-dab5-4c34-bae4-a71142b8ffed","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48930","PortSpecifier":{"PortValue":48930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241633,"nanos":595858271},"http":{"id":"9768552e-c8ed-4269-b2f1-cce77730acbf","method":"GET","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/249be7f3-dab5-4c34-bae4-a71142b8ffed",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/249be7f3-dab5-4c34-bae4-a71142b8ffed",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9768552e-c8ed-4269-b2f1-cce77730acbf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afb8e023-19ed-4891-9867-d5fae100f568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44366","PortSpecifier":{"PortValue":44366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afb8e023-19ed-4891-9867-d5fae100f568","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afb8e023-19ed-4891-9867-d5fae100f568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44366","PortSpecifier":{"PortValue":44366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241650,"nanos":700111966},"http":{"id":"afb8e023-19ed-4891-9867-d5fae100f568","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afb8e023-19ed-4891-9867-d5fae100f568","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afb8e023-19ed-4891-9867-d5fae100f568","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afb8e023-19ed-4891-9867-d5fae100f568","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afb8e023-19ed-4891-9867-d5fae100f568","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afb8e023-19ed-4891-9867-d5fae100f568","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afb8e023-19ed-4891-9867-d5fae100f568","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afb8e023-19ed-4891-9867-d5fae100f568","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afb8e023-19ed-4891-9867-d5fae100f568","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afb8e023-19ed-4891-9867-d5fae100f568","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afb8e023-19ed-4891-9867-d5fae100f568","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afb8e023-19ed-4891-9867-d5fae100f568","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37180","PortSpecifier":{"PortValue":37180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15ba051e-6dad-4a62-8d4b-e98329795f22","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:37180","PortSpecifier":{"PortValue":37180}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241650,"nanos":748522189},"http":{"id":"15ba051e-6dad-4a62-8d4b-e98329795f22","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/auth-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15ba051e-6dad-4a62-8d4b-e98329795f22","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44372","PortSpecifier":{"PortValue":44372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3c94d79-d72d-4461-b682-5fd481d7b490","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:44372","PortSpecifier":{"PortValue":44372}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241650,"nanos":792625021},"http":{"id":"f3c94d79-d72d-4461-b682-5fd481d7b490","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Z3WVhoAt3kmVxDv0_HXkY9wcsn64vX229KSDpuWVKobvEwM0yjWv5fwM2xlz"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Z3WVhoAt3kmVxDv0_HXkY9wcsn64vX229KSDpuWVKobvEwM0yjWv5fwM2xlz\"}"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fc1f7d7a-b959-44ca-a658-f9d8df0071f1","keyName":"e2e-auth-iso-a-b16a6e","subscription":"e2e-auth-iso-e8e64a","tenant":"e2e-shared-a-1c9596","userId":"fc1f7d7a-b959-44ca-a658-f9d8df0071f1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/auth-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e8e64a"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:40:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3c94d79-d72d-4461-b682-5fd481d7b490","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d6bae22d534694c009e3acdd1485038e837ee06204853e6fbc61ae167ea1f08"} {"level":"info","ts":"2026-07-16T22:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de74d1816daa51a1ef7378274fc1ece737adefa4e94b192236c6d3ba60a85073"} {"level":"info","ts":"2026-07-16T22:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a99e28908945469f2060228de2996c922e1d290eed4707e31c21831b9dac22e"} {"level":"info","ts":"2026-07-16T22:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c658f64ed2b32bde3219ca01d30d2bf43cdd3cd5fbc75b8e9e81a765da6efb2"} {"level":"info","ts":"2026-07-16T22:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eac8e03f827430e614776d234f93b3706d8b4a9e706600e1e4a82d72efe067ab"} {"level":"info","ts":"2026-07-16T22:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f490ce90465d2d3f88c0dc89dc51664ab42a30acbf9414d50dff28f8fa297e0"} {"level":"info","ts":"2026-07-16T22:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a22ead8fc2b4c30adf6a41391703063ac7a847af3e2a2821da66ee66fff72e01"} {"level":"info","ts":"2026-07-16T22:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45fbb1a2678ebd9d0c100a9c47d74cb5e3d5e79271f44b43d69a2b41de979e77"} {"level":"info","ts":"2026-07-16T22:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da4e8876685c23a7ea40911571bc8a576ab7ccd4d64d8680c79abe8224a56af0"} {"level":"info","ts":"2026-07-16T22:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f745dd8123dcc48e19895a25fb178a85033158627aa0ecc4fea2552ea8a087d"} {"level":"info","ts":"2026-07-16T22:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2da6d608a3ae14b6ea1ad86e8a2a0feedea16973fab9e9ca0285e1240d6a74fb"} {"level":"info","ts":"2026-07-16T22:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde2ed6e5dfaa7e0a97848991d6cc174bca6f3a8b4d7bf18972c2cbbcbc4274c"} {"level":"info","ts":"2026-07-16T22:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/296640ac0535a53e419300301884f29e8e2d0ad0ab776c68ec4b300bc77039a1"} {"level":"info","ts":"2026-07-16T22:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e0eaf2f0f163acb120ae3a89454e5310872d1cb6c9c2b5ae57b4f3e5321c7e3b"} {"level":"info","ts":"2026-07-16T22:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1accd8a441da02da4779c84c2fc358ddf6071dc91414a1397df3708fbdcc188d"} {"level":"info","ts":"2026-07-16T22:40:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aaa613b02361461623628cc1a3d7438e973a88a77ef8bca5b8bd1c09a937aeb0"} {"level":"debug","ts":"2026-07-16T22:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f"} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd"} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd"} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd"} {"level":"debug","ts":"2026-07-16T22:41:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438"} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8"} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8"} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8"} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b"} {"level":"error","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"} {"level":"info","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"} {"level":"error","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8"} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce3d6cb61dba05cf20933345fbe82a0a234e7e7ea8990c383cd13673e3a26f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce3d6cb61dba05cf20933345fbe82a0a234e7e7ea8990c383cd13673e3a26f3"} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f"} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"} {"level":"debug","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"info","ts":"2026-07-16T22:41:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"} {"level":"error","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:41:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"} {"level":"debug","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c43d72eebe7d62f684cd89178a2604767a8fe5f2673c49b31c923c0c12f06fe3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad"} {"level":"info","ts":"2026-07-16T22:41:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c43d72eebe7d62f684cd89178a2604767a8fe5f2673c49b31c923c0c12f06fe3"} {"level":"info","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48954","PortSpecifier":{"PortValue":48954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48954","PortSpecifier":{"PortValue":48954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241723,"nanos":892978166},"http":{"id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/sub-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c1d190d-ed6a-4110-9438-1eec89e17df1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54732","PortSpecifier":{"PortValue":54732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54732","PortSpecifier":{"PortValue":54732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241723,"nanos":938469614},"http":{"id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/sub-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f8c4957-2b3d-4121-a71c-5a626a5ea83b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48970","PortSpecifier":{"PortValue":48970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:48970","PortSpecifier":{"PortValue":48970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241723,"nanos":979176162},"http":{"id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","method":"GET","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yCsdIacYgNKIgb02_HBY2ofuxs1Gho2P9iQxTc8zSG97hnDS2zwZuetEEHpx"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yCsdIacYgNKIgb02_HBY2ofuxs1Gho2P9iQxTc8zSG97hnDS2zwZuetEEHpx\"}"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c4f07fe7-681d-4afc-bad4-1fb6425e1fd7","keyName":"e2e-sub-iso-aadef9","subscription":"e2e-a-only-bd1dd5","tenant":"e2e-shared-a-1c9596","userId":"c4f07fe7-681d-4afc-bad4-1fb6425e1fd7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/sub-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-bd1dd5"} {"level":"info","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:42:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37a2ec2d-1ed6-40c2-b17f-5359daa5ddac","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54736","PortSpecifier":{"PortValue":54736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a62c01b7-dc59-4903-84d4-7908607e97f5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:54736","PortSpecifier":{"PortValue":54736}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241724,"nanos":20281808},"http":{"id":"a62c01b7-dc59-4903-84d4-7908607e97f5","method":"GET","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18CWWaXsxSEcu94Ds_kNUv5R5QFDzSZRjzh79Jhu5xwN1ADZfHMlF5PGXTHR4"} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7d2f73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18CWWaXsxSEcu94Ds_kNUv5R5QFDzSZRjzh79Jhu5xwN1ADZfHMlF5PGXTHR4\"}"} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7d2f73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4431ffe9-11ea-416c-b7a3-17045101db57","keyName":"e2e-sub-iso-f728ed","subscription":"e2e-b-only-bd1dd5","tenant":"e2e-shared-b-7d2f73","userId":"4431ffe9-11ea-416c-b7a3-17045101db57","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/sub-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-bd1dd5"} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:42:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a62c01b7-dc59-4903-84d4-7908607e97f5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39938","PortSpecifier":{"PortValue":39938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39938","PortSpecifier":{"PortValue":39938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241738,"nanos":414903451},"http":{"id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/sub-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc2afefc-1e77-43f4-b39e-6e5f3cca38a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36582","PortSpecifier":{"PortValue":36582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36582","PortSpecifier":{"PortValue":36582}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241738,"nanos":452271697},"http":{"id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/sub-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed7a7301-41d2-4b2a-a69b-22bd45b86bfc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39940","PortSpecifier":{"PortValue":39940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:39940","PortSpecifier":{"PortValue":39940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241738,"nanos":488300855},"http":{"id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-bvYrYwcWbghI4Zbm_ldNmz4gSp2zHtmGF3kcPs1LK80hiI0DBhxkMRdzMcIV"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-bvYrYwcWbghI4Zbm_ldNmz4gSp2zHtmGF3kcPs1LK80hiI0DBhxkMRdzMcIV\"}"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b21d4893-a980-454a-9c82-758fe004a28b","keyName":"e2e-sub-iso-92a8a3","subscription":"e2e-shared-sub-7960f5","tenant":"e2e-shared-a-1c9596","userId":"b21d4893-a980-454a-9c82-758fe004a28b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/sub-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7960f5"} {"level":"info","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d3e53d7-1f8c-4620-8a8d-fdc01e1ec590","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36598","PortSpecifier":{"PortValue":36598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:36598","PortSpecifier":{"PortValue":36598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241738,"nanos":513922166},"http":{"id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-dXeogohrwmQWgd5C_jwJLopFOTY72zlUwEO2tXQFQN0M9Lz4sRZI4R1Z2vWY"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7d2f73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-dXeogohrwmQWgd5C_jwJLopFOTY72zlUwEO2tXQFQN0M9Lz4sRZI4R1Z2vWY\"}"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7d2f73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"001724ba-080b-4c02-a67d-c6fd86bcfb4f","keyName":"e2e-sub-iso-5a0c59","subscription":"e2e-shared-sub-7960f5","tenant":"e2e-shared-b-7d2f73","userId":"001724ba-080b-4c02-a67d-c6fd86bcfb4f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/sub-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7960f5"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:42:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b78db6e3-1f86-453d-9d1f-e57d82d60d48","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/802f651b59d41434cef487dbf8bc1bac20a26c0cbaf136c9718d6a2fda1859ca"} {"level":"info","ts":"2026-07-16T22:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/011db3b73d5e5b556585b570d70eb5f446754b6fdc6c7e70c9cd46b5ad3f7438"} {"level":"info","ts":"2026-07-16T22:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/af48781c9607d6bc57a78a7ac2f5c667357b5c567f65cf2a722282ac39cc2e98"} {"level":"info","ts":"2026-07-16T22:42:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/402af12a07af7609e20ddcd25e1858a39214c6004729cd5bbaf9145db9c7cf2e"} {"level":"info","ts":"2026-07-16T22:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7815605459d7107927ee21804e7a6245a58af628607d25af01d08edd8248397"} {"level":"info","ts":"2026-07-16T22:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3374577b7d3863b638e6b55fface39d40ff9a96baf384a39ad345cf2897ae72e"} {"level":"info","ts":"2026-07-16T22:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5b982c9c9466cb884a720dee61dd4cb8a00e3669ccf64416162b5003a2a469f"} {"level":"info","ts":"2026-07-16T22:42:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/751819971a0c12ad8ff4cb80d1c10ab251166b888aa05212773016bf74176edd"} {"level":"debug","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"} {"level":"debug","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"} {"level":"debug","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"} {"level":"debug","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"} {"level":"debug","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786"} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786"} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"error","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"info","ts":"2026-07-16T22:42:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"info","ts":"2026-07-16T22:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b29709f89a65da2446664726356087a7b3842ba49657e2df62c1ec22e59c8510"} {"level":"info","ts":"2026-07-16T22:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/328fb13f80bff093c56c87d7ee655206334af45785ac4a3fb12763ff1d5c721e"} {"level":"info","ts":"2026-07-16T22:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ceb04dc5542a9267f2a65ca3b9aa9ff2f004882fb33f217b16992fc52d163190"} {"level":"info","ts":"2026-07-16T22:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2193498cf5c12b2574c65f45ae87877284a95b593a881a83993fbf727b77442f"} {"level":"info","ts":"2026-07-16T22:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5039857b31e6da8a28b4aa72289ab7341ca6d5c51d1f6c6959578198cb4ccfd3"} {"level":"info","ts":"2026-07-16T22:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1f7bdfe079c9765ab7c4435d6c23497b0bd83ac65aa88d20d1044db0c23d941"} {"level":"info","ts":"2026-07-16T22:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81ca6c253c3797ae057c466dfff12c109d8b1224e17b44dba2d7a6846bfb095b"} {"level":"info","ts":"2026-07-16T22:42:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6099447635b51b9827c265984c4426100f8df9f6e333d14c5dd44799b40745d8"} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"error","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de"} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de"} {"level":"info","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718"} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718"} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1"} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1"} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1"} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:42:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4"} {"level":"info","ts":"2026-07-16T22:42:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1"} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"debug","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"error","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"error","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"} {"level":"error","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"error","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8ce3d6cb61dba05cf20933345fbe82a0a234e7e7ea8990c383cd13673e3a26f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c43d72eebe7d62f684cd89178a2604767a8fe5f2673c49b31c923c0c12f06fe3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8ce3d6cb61dba05cf20933345fbe82a0a234e7e7ea8990c383cd13673e3a26f3"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T22:43:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c43d72eebe7d62f684cd89178a2604767a8fe5f2673c49b31c923c0c12f06fe3"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"debug","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"} {"level":"info","ts":"2026-07-16T22:43:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de"} {"level":"info","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52896","PortSpecifier":{"PortValue":52896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52896","PortSpecifier":{"PortValue":52896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241795,"nanos":334131752},"http":{"id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dc590b12-b1f7-4004-a5b1-1a77ff4a569e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51366","PortSpecifier":{"PortValue":51366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:51366","PortSpecifier":{"PortValue":51366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241795,"nanos":374057486},"http":{"id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/rate-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8eb182c8-d7e7-4a13-ad9c-54b6d45ab78f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52904","PortSpecifier":{"PortValue":52904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","method":"POST","path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52904","PortSpecifier":{"PortValue":52904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241795,"nanos":412281661},"http":{"id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10DyjHApPACe4qzfy_1Q4zRyIdmsSbfie9WDnKTGzaDhJahqe1CAPAvhpWKua"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10DyjHApPACe4qzfy_1Q4zRyIdmsSbfie9WDnKTGzaDhJahqe1CAPAvhpWKua\"}"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f51aff78-6bdc-4099-a58b-cb02f610aa0f","keyName":"e2e-rate-a-d88ebc","subscription":"e2e-rate-iso-a-d88ebc","tenant":"e2e-shared-a-1c9596","userId":"f51aff78-6bdc-4099-a58b-cb02f610aa0f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\",\"requestedSubscription\":\"e2e-rate-iso-a-d88ebc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d88ebc","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d88ebc"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f51aff78-6bdc-4099-a58b-cb02f610aa0f","keyName":"e2e-rate-a-d88ebc","selected_subscription":"e2e-rate-iso-a-d88ebc","selected_subscription_key":"ai-tenant-e2e-shared-a-1c9596/e2e-rate-iso-a-d88ebc@ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d88ebc","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"efcd82eb-5c95-4517-ad5a-fad56bbb49f4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52916","PortSpecifier":{"PortValue":52916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9b921f28-8196-4cc2-9f55-6f25418f3603","method":"POST","path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52916","PortSpecifier":{"PortValue":52916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241796,"nanos":460570487},"http":{"id":"9b921f28-8196-4cc2-9f55-6f25418f3603","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10DyjHApPACe4qzfy_1Q4zRyIdmsSbfie9WDnKTGzaDhJahqe1CAPAvhpWKua"} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10DyjHApPACe4qzfy_1Q4zRyIdmsSbfie9WDnKTGzaDhJahqe1CAPAvhpWKua\"}"} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f51aff78-6bdc-4099-a58b-cb02f610aa0f","keyName":"e2e-rate-a-d88ebc","subscription":"e2e-rate-iso-a-d88ebc","tenant":"e2e-shared-a-1c9596","userId":"f51aff78-6bdc-4099-a58b-cb02f610aa0f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\",\"requestedSubscription\":\"e2e-rate-iso-a-d88ebc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d88ebc","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d88ebc"} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f51aff78-6bdc-4099-a58b-cb02f610aa0f","keyName":"e2e-rate-a-d88ebc","selected_subscription":"e2e-rate-iso-a-d88ebc","selected_subscription_key":"ai-tenant-e2e-shared-a-1c9596/e2e-rate-iso-a-d88ebc@ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d88ebc","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9b921f28-8196-4cc2-9f55-6f25418f3603","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40434fab-192f-47e4-9553-29791295195d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52920","PortSpecifier":{"PortValue":52920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40434fab-192f-47e4-9553-29791295195d","method":"POST","path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40434fab-192f-47e4-9553-29791295195d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:52920","PortSpecifier":{"PortValue":52920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241797,"nanos":500203336},"http":{"id":"40434fab-192f-47e4-9553-29791295195d","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10DyjHApPACe4qzfy_1Q4zRyIdmsSbfie9WDnKTGzaDhJahqe1CAPAvhpWKua"} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40434fab-192f-47e4-9553-29791295195d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10DyjHApPACe4qzfy_1Q4zRyIdmsSbfie9WDnKTGzaDhJahqe1CAPAvhpWKua\"}"} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f51aff78-6bdc-4099-a58b-cb02f610aa0f","keyName":"e2e-rate-a-d88ebc","subscription":"e2e-rate-iso-a-d88ebc","tenant":"e2e-shared-a-1c9596","userId":"f51aff78-6bdc-4099-a58b-cb02f610aa0f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"40434fab-192f-47e4-9553-29791295195d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\",\"requestedSubscription\":\"e2e-rate-iso-a-d88ebc\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d88ebc","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40434fab-192f-47e4-9553-29791295195d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-d88ebc"} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40434fab-192f-47e4-9553-29791295195d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f51aff78-6bdc-4099-a58b-cb02f610aa0f","keyName":"e2e-rate-a-d88ebc","selected_subscription":"e2e-rate-iso-a-d88ebc","selected_subscription_key":"ai-tenant-e2e-shared-a-1c9596/e2e-rate-iso-a-d88ebc@ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-d88ebc","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40434fab-192f-47e4-9553-29791295195d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40434fab-192f-47e4-9553-29791295195d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"651a6116-fc64-49f1-92e9-a792d808826b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42804","PortSpecifier":{"PortValue":42804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"651a6116-fc64-49f1-92e9-a792d808826b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"651a6116-fc64-49f1-92e9-a792d808826b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42804","PortSpecifier":{"PortValue":42804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241810,"nanos":471365180},"http":{"id":"651a6116-fc64-49f1-92e9-a792d808826b","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"651a6116-fc64-49f1-92e9-a792d808826b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"651a6116-fc64-49f1-92e9-a792d808826b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"651a6116-fc64-49f1-92e9-a792d808826b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"651a6116-fc64-49f1-92e9-a792d808826b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"651a6116-fc64-49f1-92e9-a792d808826b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"651a6116-fc64-49f1-92e9-a792d808826b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"651a6116-fc64-49f1-92e9-a792d808826b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"651a6116-fc64-49f1-92e9-a792d808826b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"651a6116-fc64-49f1-92e9-a792d808826b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"651a6116-fc64-49f1-92e9-a792d808826b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"651a6116-fc64-49f1-92e9-a792d808826b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49160","PortSpecifier":{"PortValue":49160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49160","PortSpecifier":{"PortValue":49160}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241810,"nanos":510690994},"http":{"id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"]}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/a159de415983"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=20093902-ec4a-4d87-9502-62e9e128a1ef"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7d71467c-d7a8-4538-af5c-2ebc888d0755","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/rate-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca150716-96e2-4a2d-95fe-a02a4f41ad99","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3acc0edb-928d-4800-9965-e50ce619becd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42808","PortSpecifier":{"PortValue":42808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3acc0edb-928d-4800-9965-e50ce619becd","method":"POST","path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3acc0edb-928d-4800-9965-e50ce619becd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42808","PortSpecifier":{"PortValue":42808}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241810,"nanos":550172797},"http":{"id":"3acc0edb-928d-4800-9965-e50ce619becd","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LYbO5Sd4LDsyUoHu_sDvSFaGD9mZxd75AHBPbfzkZ8izU4TL0xZx4nIkLUFr"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LYbO5Sd4LDsyUoHu_sDvSFaGD9mZxd75AHBPbfzkZ8izU4TL0xZx4nIkLUFr\"}"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"74712726-aaa9-4950-8c6d-7c131c0a5045","keyName":"e2e-rate-a-fd150d","subscription":"e2e-rate-iso-a-fd150d","tenant":"e2e-shared-a-1c9596","userId":"74712726-aaa9-4950-8c6d-7c131c0a5045","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\",\"requestedSubscription\":\"e2e-rate-iso-a-fd150d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd150d","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3acc0edb-928d-4800-9965-e50ce619becd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fd150d"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3acc0edb-928d-4800-9965-e50ce619becd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"74712726-aaa9-4950-8c6d-7c131c0a5045","keyName":"e2e-rate-a-fd150d","selected_subscription":"e2e-rate-iso-a-fd150d","selected_subscription_key":"ai-tenant-e2e-shared-a-1c9596/e2e-rate-iso-a-fd150d@ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd150d","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3acc0edb-928d-4800-9965-e50ce619becd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3acc0edb-928d-4800-9965-e50ce619becd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42816","PortSpecifier":{"PortValue":42816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","method":"POST","path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42816","PortSpecifier":{"PortValue":42816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241811,"nanos":585188872},"http":{"id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LYbO5Sd4LDsyUoHu_sDvSFaGD9mZxd75AHBPbfzkZ8izU4TL0xZx4nIkLUFr"} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LYbO5Sd4LDsyUoHu_sDvSFaGD9mZxd75AHBPbfzkZ8izU4TL0xZx4nIkLUFr\"}"} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"74712726-aaa9-4950-8c6d-7c131c0a5045","keyName":"e2e-rate-a-fd150d","subscription":"e2e-rate-iso-a-fd150d","tenant":"e2e-shared-a-1c9596","userId":"74712726-aaa9-4950-8c6d-7c131c0a5045","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\",\"requestedSubscription\":\"e2e-rate-iso-a-fd150d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd150d","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fd150d"} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"74712726-aaa9-4950-8c6d-7c131c0a5045","keyName":"e2e-rate-a-fd150d","selected_subscription":"e2e-rate-iso-a-fd150d","selected_subscription_key":"ai-tenant-e2e-shared-a-1c9596/e2e-rate-iso-a-fd150d@ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd150d","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cb8a899-b42d-44a3-9d80-dfcc104269e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96a67b0d-be17-4351-b118-e76795eea022","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42826","PortSpecifier":{"PortValue":42826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96a67b0d-be17-4351-b118-e76795eea022","method":"POST","path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions","host":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96a67b0d-be17-4351-b118-e76795eea022","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:42826","PortSpecifier":{"PortValue":42826}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241812,"nanos":621200734},"http":{"id":"96a67b0d-be17-4351-b118-e76795eea022","method":"POST","headers":{":authority":"e2e-shared-a-1c9596.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LYbO5Sd4LDsyUoHu_sDvSFaGD9mZxd75AHBPbfzkZ8izU4TL0xZx4nIkLUFr"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LYbO5Sd4LDsyUoHu_sDvSFaGD9mZxd75AHBPbfzkZ8izU4TL0xZx4nIkLUFr\"}"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"74712726-aaa9-4950-8c6d-7c131c0a5045","keyName":"e2e-rate-a-fd150d","subscription":"e2e-rate-iso-a-fd150d","tenant":"e2e-shared-a-1c9596","userId":"74712726-aaa9-4950-8c6d-7c131c0a5045","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\",\"requestedSubscription\":\"e2e-rate-iso-a-fd150d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-1c9596.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd150d","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96a67b0d-be17-4351-b118-e76795eea022","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-1c9596/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-fd150d"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96a67b0d-be17-4351-b118-e76795eea022","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"74712726-aaa9-4950-8c6d-7c131c0a5045","keyName":"e2e-rate-a-fd150d","selected_subscription":"e2e-rate-iso-a-fd150d","selected_subscription_key":"ai-tenant-e2e-shared-a-1c9596/e2e-rate-iso-a-fd150d@ai-tenant-e2e-shared-a-1c9596/rate-test-model-1c9596","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-1c9596","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-fd150d","namespace":"ai-tenant-e2e-shared-a-1c9596","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96a67b0d-be17-4351-b118-e76795eea022","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96a67b0d-be17-4351-b118-e76795eea022","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49174","PortSpecifier":{"PortValue":49174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04db798f-6b3b-461f-812c-b87bd3221c7a","method":"POST","path":"/ai-tenant-e2e-shared-b-7d2f73/rate-test-model-7d2f73/v1/completions","host":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.10:49174","PortSpecifier":{"PortValue":49174}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784241812,"nanos":656437468},"http":{"id":"04db798f-6b3b-461f-812c-b87bd3221c7a","method":"POST","headers":{":authority":"e2e-shared-b-7d2f73.apps.8e5b7192-455c-4440-a08e-a159de415983.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-7d2f73/rate-test-model-7d2f73/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1MoPqfQdVV4xnNDRl_FxXFKX7cpNZsixGVzkoXiPd1j3qFIqCskFcfpqAfEsp"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7d2f73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1MoPqfQdVV4xnNDRl_FxXFKX7cpNZsixGVzkoXiPd1j3qFIqCskFcfpqAfEsp\"}"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7d2f73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0bc5d52c-bf99-49ad-be52-7ee123b42aab","keyName":"e2e-rate-b-fd150d","subscription":"e2e-rate-iso-b-fd150d","tenant":"e2e-shared-b-7d2f73","userId":"0bc5d52c-bf99-49ad-be52-7ee123b42aab","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-7d2f73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-7d2f73/rate-test-model-7d2f73\",\"requestedSubscription\":\"e2e-rate-iso-b-fd150d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7d2f73.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7d2f73","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fd150d","namespace":"ai-tenant-e2e-shared-b-7d2f73","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7d2f73/rate-test-model-7d2f73\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7d2f73/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-fd150d"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0bc5d52c-bf99-49ad-be52-7ee123b42aab","keyName":"e2e-rate-b-fd150d","selected_subscription":"e2e-rate-iso-b-fd150d","selected_subscription_key":"ai-tenant-e2e-shared-b-7d2f73/e2e-rate-iso-b-fd150d@ai-tenant-e2e-shared-b-7d2f73/rate-test-model-7d2f73","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7d2f73","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-fd150d","namespace":"ai-tenant-e2e-shared-b-7d2f73","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T22:43:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04db798f-6b3b-461f-812c-b87bd3221c7a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T22:43:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c35111bbeaf90036e16ee1ab2925eb7edcf057743287986f133bd5bef65f7c1"} {"level":"info","ts":"2026-07-16T22:43:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a21a962563e6be3c63ff6884bca2d07e6f6592263ce998c774b3077161d5a76"} {"level":"info","ts":"2026-07-16T22:43:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a023f5d5d5a3348c80d6189b7585f1e01458cb10018fed3a9e2a79e80ab44de"} {"level":"info","ts":"2026-07-16T22:43:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35c2a6a2d401387d360320c491bfee1bdf4f4e0c3c90cce33aa3f0df77cf1e7a"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54695db9ab163dbec9dfa984ee0a559aa5b5c98e35f66fd40f31c5416f5e7718"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53d6e2d0b345a021c106692f4536d5ec89eb983921cfc4f1f055be21cb61d7e6"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aba15718354f46d9083ec5c8bb5bd1addc60b8f5bb9d24ca614812ca98cf135"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b2c2a2805155f39e42a4f66076c4002c1da894b1c5e8b69a745f2bae52f74c4"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e87a26f6735c26fc69f2805ec747f3269c38fa811e8f356b61e5d56782154956"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea4dffec209b79687394479308c0680a3d7d17b0abbc7ad8903278518217eec3"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d0a2fa8c45d007f074ecc6dfd4d7f3be038cd82fa83164cbb1f82192ab785ec"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8f874652dbd13904747b358e19776b79fabd6532c36dd550c967c4dbfcf76df"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d6480cef037e8bd205d6bf4912825347b2ee462cc404ca7fe878b1b2765d9b8"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c75dc5563b46ef67787e418433dac9f3a8f6550069b7a9d3a090fd594b17b786"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/94f22c87ee1e74ba6c87b28081db3ebf9e12196ea73d027baff96f03c237cb36"} {"level":"info","ts":"2026-07-16T22:43:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80ff68f976b8013577966ca2e53fc5e54f2874e366e5b6cb6fe5e1089cc459a9"} {"level":"info","ts":"2026-07-16T22:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b24d9e5491891e67e203719dcc09656e1275b6300b77d848ea79e05198f60691"} {"level":"info","ts":"2026-07-16T22:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8ce3d6cb61dba05cf20933345fbe82a0a234e7e7ea8990c383cd13673e3a26f3"} {"level":"info","ts":"2026-07-16T22:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aad9f982e034eaca6058cccf4d089a0e2723186f5527c23eb0baa366e8998fa0"} {"level":"info","ts":"2026-07-16T22:44:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c43d72eebe7d62f684cd89178a2604767a8fe5f2673c49b31c923c0c12f06fe3"} {"level":"info","ts":"2026-07-16T22:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5e1908015a5a600efb95eaa00ab81e9034be6d3a273f767112e7e16ea0f9bbd"} {"level":"info","ts":"2026-07-16T22:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e89f87b52359ad73ec4aa32a5d5d21b42d1d77c35601277398ccbe97b2592c7d"} {"level":"info","ts":"2026-07-16T22:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/232a3166643be8e9c8deba2e891c02f8cdb705f9f7bdebfc81cea74e985392e9"} {"level":"info","ts":"2026-07-16T22:44:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64ea6fc10ae723c43c271191878ea517ca7026a68b031682349d61e735f7e5ad"}