--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e002dc5e72d5f48e86bb864a85edbb6adac098204edc64a016494c6fd62dfc4"} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bd3b02ad47a636349972624aa39714a9c094f67f6c7d1fe87daae426e6ee7fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e002dc5e72d5f48e86bb864a85edbb6adac098204edc64a016494c6fd62dfc4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bd3b02ad47a636349972624aa39714a9c094f67f6c7d1fe87daae426e6ee7fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e002dc5e72d5f48e86bb864a85edbb6adac098204edc64a016494c6fd62dfc4"} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e002dc5e72d5f48e86bb864a85edbb6adac098204edc64a016494c6fd62dfc4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e002dc5e72d5f48e86bb864a85edbb6adac098204edc64a016494c6fd62dfc4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e002dc5e72d5f48e86bb864a85edbb6adac098204edc64a016494c6fd62dfc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bd3b02ad47a636349972624aa39714a9c094f67f6c7d1fe87daae426e6ee7fa"} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e002dc5e72d5f48e86bb864a85edbb6adac098204edc64a016494c6fd62dfc4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e002dc5e72d5f48e86bb864a85edbb6adac098204edc64a016494c6fd62dfc4"} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3"} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3"} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3"} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3"} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3"} {"level":"info","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3"} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"} {"level":"error","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9fc7e1b91780403e20bc2ef30758cfe9ff5f1249f535cf809aefb85a6707045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fc7e1b91780403e20bc2ef30758cfe9ff5f1249f535cf809aefb85a6707045"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9fc7e1b91780403e20bc2ef30758cfe9ff5f1249f535cf809aefb85a6707045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9fc7e1b91780403e20bc2ef30758cfe9ff5f1249f535cf809aefb85a6707045","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9fc7e1b91780403e20bc2ef30758cfe9ff5f1249f535cf809aefb85a6707045"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9fc7e1b91780403e20bc2ef30758cfe9ff5f1249f535cf809aefb85a6707045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9fc7e1b91780403e20bc2ef30758cfe9ff5f1249f535cf809aefb85a6707045","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9fc7e1b91780403e20bc2ef30758cfe9ff5f1249f535cf809aefb85a6707045"} {"level":"info","ts":"2026-07-09T02:34:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e"} {"level":"debug","ts":"2026-07-09T02:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa"} {"level":"debug","ts":"2026-07-09T02:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc"} {"level":"error","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc"} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a"} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:34:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc"} {"level":"info","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc"} {"level":"info","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a"} {"level":"info","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102034e07a50888ca6010b62765652613cb3525957a2b3c5d00ff96758e740c8"} {"level":"info","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"102034e07a50888ca6010b62765652613cb3525957a2b3c5d00ff96758e740c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:34:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:34:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["102034e07a50888ca6010b62765652613cb3525957a2b3c5d00ff96758e740c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc"} {"level":"info","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"102034e07a50888ca6010b62765652613cb3525957a2b3c5d00ff96758e740c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"102034e07a50888ca6010b62765652613cb3525957a2b3c5d00ff96758e740c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:34:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/102034e07a50888ca6010b62765652613cb3525957a2b3c5d00ff96758e740c8"} {"level":"info","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57470","PortSpecifier":{"PortValue":57470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34f90891-0b83-45ec-824b-a50e0b314fa0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57470","PortSpecifier":{"PortValue":57470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564500,"nanos":198428690},"http":{"id":"34f90891-0b83-45ec-824b-a50e0b314fa0","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34f90891-0b83-45ec-824b-a50e0b314fa0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58004","PortSpecifier":{"PortValue":58004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58004","PortSpecifier":{"PortValue":58004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564500,"nanos":259155875},"http":{"id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/auth-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"82fbf312-6bf7-4d73-bff6-c58abd67e189","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57472","PortSpecifier":{"PortValue":57472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","method":"GET","path":"/maas-api/v1/api-keys/d7eb2732-cbc3-468e-b4dd-12419d45f808","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57472","PortSpecifier":{"PortValue":57472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564500,"nanos":345468279},"http":{"id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","method":"GET","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d7eb2732-cbc3-468e-b4dd-12419d45f808",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d7eb2732-cbc3-468e-b4dd-12419d45f808",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d37d5f01-9b42-49ee-ab9c-b45731ff36a6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58020","PortSpecifier":{"PortValue":58020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51e89033-98c5-4942-90a4-25e7afc1d450","method":"GET","path":"/maas-api/v1/api-keys/d6f0303c-5c20-4fe7-9787-39adfa6afcae","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:58020","PortSpecifier":{"PortValue":58020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564500,"nanos":380802908},"http":{"id":"51e89033-98c5-4942-90a4-25e7afc1d450","method":"GET","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d6f0303c-5c20-4fe7-9787-39adfa6afcae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d6f0303c-5c20-4fe7-9787-39adfa6afcae",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/auth-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51e89033-98c5-4942-90a4-25e7afc1d450","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50060","PortSpecifier":{"PortValue":50060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8df38234-8f67-474d-b063-9d2ad9af0be4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50060","PortSpecifier":{"PortValue":50060}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564517,"nanos":422324255},"http":{"id":"8df38234-8f67-474d-b063-9d2ad9af0be4","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8df38234-8f67-474d-b063-9d2ad9af0be4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57120","PortSpecifier":{"PortValue":57120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57120","PortSpecifier":{"PortValue":57120}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564517,"nanos":460259209},"http":{"id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/auth-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe594ff1-1c5a-446c-8e7d-b163eba40297","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50066","PortSpecifier":{"PortValue":50066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50066","PortSpecifier":{"PortValue":50066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564517,"nanos":505396334},"http":{"id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","method":"GET","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ciBJnqAAuMkjQHNl_oJWmBG3b3banfDB81GX5Zc84yWrH3NtMtSbMDs8StHo"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ciBJnqAAuMkjQHNl_oJWmBG3b3banfDB81GX5Zc84yWrH3NtMtSbMDs8StHo\"}"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01020f1b-85e8-437a-8248-1763a08771a7","keyName":"e2e-auth-iso-a-18ecaf","subscription":"e2e-auth-iso-a65a8c","tenant":"e2e-shared-a-7124ed","userId":"01020f1b-85e8-437a-8248-1763a08771a7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a65a8c"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cfdbc00b-6137-4a22-b856-c6b35aadc4b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36036","PortSpecifier":{"PortValue":36036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:36036","PortSpecifier":{"PortValue":36036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564534,"nanos":499982958},"http":{"id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74770e22-3088-467b-ab3e-4ef68f1fbb58","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39656","PortSpecifier":{"PortValue":39656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84b40bcb-1a50-408a-940b-bad3aee24650","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39656","PortSpecifier":{"PortValue":39656}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564534,"nanos":533917723},"http":{"id":"84b40bcb-1a50-408a-940b-bad3aee24650","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/auth-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84b40bcb-1a50-408a-940b-bad3aee24650","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56562a16-6172-471d-a8a8-a0213604d098","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39668","PortSpecifier":{"PortValue":39668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56562a16-6172-471d-a8a8-a0213604d098","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56562a16-6172-471d-a8a8-a0213604d098","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39668","PortSpecifier":{"PortValue":39668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564534,"nanos":570791024},"http":{"id":"56562a16-6172-471d-a8a8-a0213604d098","method":"GET","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56562a16-6172-471d-a8a8-a0213604d098","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-U9PKQYEqBtpX2TFO_MiTgaq9Qs8CpKHRmwGu1IvpDKzEFkn4N9g2hengfk5o"} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56562a16-6172-471d-a8a8-a0213604d098","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-U9PKQYEqBtpX2TFO_MiTgaq9Qs8CpKHRmwGu1IvpDKzEFkn4N9g2hengfk5o\"}"} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56562a16-6172-471d-a8a8-a0213604d098","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56562a16-6172-471d-a8a8-a0213604d098","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56562a16-6172-471d-a8a8-a0213604d098","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"56562a16-6172-471d-a8a8-a0213604d098","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56562a16-6172-471d-a8a8-a0213604d098","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-09T02:35:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56562a16-6172-471d-a8a8-a0213604d098","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55870","PortSpecifier":{"PortValue":55870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d92d36bf-0fd9-4620-b253-de8575d95233","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55870","PortSpecifier":{"PortValue":55870}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564551,"nanos":747537800},"http":{"id":"d92d36bf-0fd9-4620-b253-de8575d95233","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d92d36bf-0fd9-4620-b253-de8575d95233","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56614","PortSpecifier":{"PortValue":56614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56614","PortSpecifier":{"PortValue":56614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564551,"nanos":785100952},"http":{"id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/auth-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7f0cb5f-f7d2-4ac5-9644-3751bdc7deda","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55878","PortSpecifier":{"PortValue":55878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55878","PortSpecifier":{"PortValue":55878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564551,"nanos":822725984},"http":{"id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7df3be6-d729-4c72-a661-1d0a53d987ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56624","PortSpecifier":{"PortValue":56624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56624","PortSpecifier":{"PortValue":56624}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564551,"nanos":856666919},"http":{"id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/auth-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:35:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15c0c39f-b6f3-460b-bfe9-3190a881f9be","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39430","PortSpecifier":{"PortValue":39430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d90827f-f4b1-4b80-afa9-5b3675800240","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39430","PortSpecifier":{"PortValue":39430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564569,"nanos":41413813},"http":{"id":"3d90827f-f4b1-4b80-afa9-5b3675800240","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d90827f-f4b1-4b80-afa9-5b3675800240","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40960","PortSpecifier":{"PortValue":40960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba24565f-8607-447c-af05-9a6a4cbc380b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40960","PortSpecifier":{"PortValue":40960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564569,"nanos":76440312},"http":{"id":"ba24565f-8607-447c-af05-9a6a4cbc380b","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/auth-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba24565f-8607-447c-af05-9a6a4cbc380b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40968","PortSpecifier":{"PortValue":40968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80401248-a39b-4967-9a03-7bf95cbfad9a","method":"GET","path":"/maas-api/v1/api-keys/ccf80eaa-3ec1-4c01-ab91-8a0560d5a515","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:40968","PortSpecifier":{"PortValue":40968}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564569,"nanos":119560718},"http":{"id":"80401248-a39b-4967-9a03-7bf95cbfad9a","method":"GET","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ccf80eaa-3ec1-4c01-ab91-8a0560d5a515",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ccf80eaa-3ec1-4c01-ab91-8a0560d5a515",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/auth-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80401248-a39b-4967-9a03-7bf95cbfad9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39436","PortSpecifier":{"PortValue":39436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","method":"GET","path":"/maas-api/v1/api-keys/ccf80eaa-3ec1-4c01-ab91-8a0560d5a515","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39436","PortSpecifier":{"PortValue":39436}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564569,"nanos":148728024},"http":{"id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","method":"GET","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ccf80eaa-3ec1-4c01-ab91-8a0560d5a515",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ccf80eaa-3ec1-4c01-ab91-8a0560d5a515",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:36:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6782d7fb-ba4f-4709-906c-e4b41839c44b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50018","PortSpecifier":{"PortValue":50018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"543eef99-9347-44fa-bc7d-c4376e12967d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50018","PortSpecifier":{"PortValue":50018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564586,"nanos":98065885},"http":{"id":"543eef99-9347-44fa-bc7d-c4376e12967d","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"543eef99-9347-44fa-bc7d-c4376e12967d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37546","PortSpecifier":{"PortValue":37546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:37546","PortSpecifier":{"PortValue":37546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564586,"nanos":130679330},"http":{"id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/auth-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b17a82f1-ee44-4d24-90ab-05dc7a0ac7aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50032","PortSpecifier":{"PortValue":50032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:50032","PortSpecifier":{"PortValue":50032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564586,"nanos":166003427},"http":{"id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KfnWc1e6qxlSTqxi_aADmMYoHeBZNywIfXxQ6IAYijUwq3RpqLNdGbxRfyu8"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KfnWc1e6qxlSTqxi_aADmMYoHeBZNywIfXxQ6IAYijUwq3RpqLNdGbxRfyu8\"}"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5559d57f-02b5-4c92-8bae-0bd9251d38ba","keyName":"e2e-auth-iso-a-74015d","subscription":"e2e-auth-iso-74c19f","tenant":"e2e-shared-a-7124ed","userId":"5559d57f-02b5-4c92-8bae-0bd9251d38ba","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/auth-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-74c19f"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:36:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"18a64579-a0b1-476e-92d1-a035dc7bcb76","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86a6162c2eb65c38dccdcbaed018769f5253bb0bfb39432f5e1f458385a8cac3"} {"level":"info","ts":"2026-07-09T02:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f77747354e6589afe65b62b8eedc684e2abcf09707e5ef76f8c7cb9ba976f19"} {"level":"info","ts":"2026-07-09T02:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9fc7e1b91780403e20bc2ef30758cfe9ff5f1249f535cf809aefb85a6707045"} {"level":"info","ts":"2026-07-09T02:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1542f24660053a1c857939a74664559b5b1bab8af4948331beab5a2254b57c7a"} {"level":"info","ts":"2026-07-09T02:36:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/199b818bdb0e18cc3a3773d9d0403cb999edec99a0e21925c2f590f88961cb6a"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32bbf64ea4a6cdb89d94b1caed137fb0a7092f579b647899c6be8ebe8e720a8e"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83fc26956aa41ffe6d1371e9eceab26cbbb710c56c76efb9ee9835c28fd4d2f3"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e002dc5e72d5f48e86bb864a85edbb6adac098204edc64a016494c6fd62dfc4"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/83171c08b18b532042b270381822b0fa8a8f6070ebb901d3dc351f6c151d14e8"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d98883fdeab9495401cc80e84c5350986cd4e488294ea88f0c52b340a55329fa"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b9762b1ae0ac1619fccf62e06d203c5d4268cd4ef7559220c48f85a17820f7e"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ddf62cf425c88f2c5c7fb6b817125484336abdd65cdcdeef58a4a5ef3bfa5bbb"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c74407db3fcfb06165146e620a8ae7b76b84909421ccfb44ee046aa6a2eb0dc"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/102034e07a50888ca6010b62765652613cb3525957a2b3c5d00ff96758e740c8"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bd3b02ad47a636349972624aa39714a9c094f67f6c7d1fe87daae426e6ee7fa"} {"level":"info","ts":"2026-07-09T02:36:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4884ba3479af1973d42577cce3cda42ef03b7488ba1c87394bffc8ccc7737cb"} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7"} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7"} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7"} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7"} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7"} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402"} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"} {"level":"info","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402"} {"level":"debug","ts":"2026-07-09T02:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"error","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"error","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"error","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874"} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874"} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874"} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115"} {"level":"info","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"error","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c"} {"level":"info","ts":"2026-07-09T02:37:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115"} {"level":"info","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402"} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866"} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"} {"level":"debug","ts":"2026-07-09T02:37:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:37:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:37:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:37:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:37:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc"} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742"} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874"} {"level":"debug","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7"} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c"} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df"} {"level":"info","ts":"2026-07-09T02:37:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"} {"level":"info","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33366","PortSpecifier":{"PortValue":33366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9f6c369-3f96-414f-889b-89d3290b30bf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33366","PortSpecifier":{"PortValue":33366}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564646,"nanos":562713724},"http":{"id":"e9f6c369-3f96-414f-889b-89d3290b30bf","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/sub-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9f6c369-3f96-414f-889b-89d3290b30bf","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48548","PortSpecifier":{"PortValue":48548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48548","PortSpecifier":{"PortValue":48548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564646,"nanos":603101394},"http":{"id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/sub-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e159a428-fdfc-41e5-a654-c5e6cd931c59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33378","PortSpecifier":{"PortValue":33378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33378","PortSpecifier":{"PortValue":33378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564646,"nanos":643533275},"http":{"id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","method":"GET","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ulsdWkPreY9wHlnG_MULvXAZQ3alb7frLDtPSfsIQpS7r9CsDGclzbtVApbo"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ulsdWkPreY9wHlnG_MULvXAZQ3alb7frLDtPSfsIQpS7r9CsDGclzbtVApbo\"}"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"04a39ae9-63f1-4b0c-a028-f659510105e2","keyName":"e2e-sub-iso-b61541","subscription":"e2e-a-only-058e37","tenant":"e2e-shared-a-7124ed","userId":"04a39ae9-63f1-4b0c-a028-f659510105e2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/sub-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-058e37"} {"level":"info","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4bf263e-cd2f-45fe-be15-cfe32cdc811e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48558","PortSpecifier":{"PortValue":48558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:48558","PortSpecifier":{"PortValue":48558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564646,"nanos":685513902},"http":{"id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","method":"GET","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RcsWj4YJti4NaEsS_DPHJHW6ThNYe9dJeDZe9gZk6bB9gfWRx1720bMshMN6"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RcsWj4YJti4NaEsS_DPHJHW6ThNYe9dJeDZe9gZk6bB9gfWRx1720bMshMN6\"}"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"54381ca2-9e46-4207-a424-5caa537a54f5","keyName":"e2e-sub-iso-98f2e8","subscription":"e2e-b-only-058e37","tenant":"e2e-shared-b-c6afad","userId":"54381ca2-9e46-4207-a424-5caa537a54f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/sub-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-058e37"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:37:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68cc2321-1fb7-4e03-a7c1-05d4547ce43f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46718","PortSpecifier":{"PortValue":46718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46718","PortSpecifier":{"PortValue":46718}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564665,"nanos":38304548},"http":{"id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/sub-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3fac9ffc-d3f0-4359-b275-7a12d53975e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38540","PortSpecifier":{"PortValue":38540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38540","PortSpecifier":{"PortValue":38540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564665,"nanos":72271855},"http":{"id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/sub-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"887b0f66-a1cb-4105-9dda-aa957b0b4f7e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46732","PortSpecifier":{"PortValue":46732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"285e10aa-6dc9-47b1-9303-3d8f317de108","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46732","PortSpecifier":{"PortValue":46732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564665,"nanos":107117031},"http":{"id":"285e10aa-6dc9-47b1-9303-3d8f317de108","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eddxad7Xb4YzvLxZ_RdLy7hwtmn5oki4dSBHeIFfhkfeDJiBrPD4LGUtKbQz"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eddxad7Xb4YzvLxZ_RdLy7hwtmn5oki4dSBHeIFfhkfeDJiBrPD4LGUtKbQz\"}"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d76f7682-2654-48f7-b30a-64d0b21dfebb","keyName":"e2e-sub-iso-890fef","subscription":"e2e-shared-sub-1a6e6b","tenant":"e2e-shared-a-7124ed","userId":"d76f7682-2654-48f7-b30a-64d0b21dfebb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/sub-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1a6e6b"} {"level":"info","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"285e10aa-6dc9-47b1-9303-3d8f317de108","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9644b031-95d8-478c-877d-4e5dca031684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38550","PortSpecifier":{"PortValue":38550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9644b031-95d8-478c-877d-4e5dca031684","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9644b031-95d8-478c-877d-4e5dca031684","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38550","PortSpecifier":{"PortValue":38550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564665,"nanos":135728218},"http":{"id":"9644b031-95d8-478c-877d-4e5dca031684","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9644b031-95d8-478c-877d-4e5dca031684","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10jBvaVsTsLCR7826_j9TEjJ4Epl9sk81kdO71ngLdeJAxx7daNwAkIlcqgyN"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9644b031-95d8-478c-877d-4e5dca031684","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10jBvaVsTsLCR7826_j9TEjJ4Epl9sk81kdO71ngLdeJAxx7daNwAkIlcqgyN\"}"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9644b031-95d8-478c-877d-4e5dca031684","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1ac8ec67-90dd-42cb-b9b4-51134a7cbf9f","keyName":"e2e-sub-iso-425fda","subscription":"e2e-shared-sub-1a6e6b","tenant":"e2e-shared-b-c6afad","userId":"1ac8ec67-90dd-42cb-b9b4-51134a7cbf9f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9644b031-95d8-478c-877d-4e5dca031684","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9644b031-95d8-478c-877d-4e5dca031684","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9644b031-95d8-478c-877d-4e5dca031684","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9644b031-95d8-478c-877d-4e5dca031684","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/sub-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9644b031-95d8-478c-877d-4e5dca031684","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9644b031-95d8-478c-877d-4e5dca031684","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-1a6e6b"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9644b031-95d8-478c-877d-4e5dca031684","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9644b031-95d8-478c-877d-4e5dca031684","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9644b031-95d8-478c-877d-4e5dca031684","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:37:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9644b031-95d8-478c-877d-4e5dca031684","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f2d70c454735d80ac96e8a8d84de1fdee21dd6f6dbc3dda446cee172a1dab402"} {"level":"info","ts":"2026-07-09T02:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3bfa82063add6cedaaa913830d71b4e51057af15eb9e12c6d525c4298207952d"} {"level":"info","ts":"2026-07-09T02:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45eab476729cd9d7763dea16d8de2e20da5d38be772da0e0c7a62ebeb450dee7"} {"level":"info","ts":"2026-07-09T02:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ae1e290f2ab8934730699863986fe639315f5a4f9d935b9fb7f6eb1d0d7878c"} {"level":"info","ts":"2026-07-09T02:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14be4572df1bf99aa8ca7d14b59c12c755ad2a05f3c47e7a347233b68c7062df"} {"level":"info","ts":"2026-07-09T02:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/109ad0b3b8444124bdc8a4ec0be593fe750960fb12e2047ab7e8671c70f7d29a"} {"level":"info","ts":"2026-07-09T02:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/90920b59ebe51922e6f77b02ed3dbb7c272f86f7b3c298413d1329b4e435b742"} {"level":"info","ts":"2026-07-09T02:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f85bada4081ee0e9f9e7bd442a55ad52cb328e5dbf5de41d395a253fcdc8d603"} {"level":"info","ts":"2026-07-09T02:37:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cde61830356c8cab35da2d745842a3645dafc9cb9cdbe682844b1f0d331d771c"} {"level":"info","ts":"2026-07-09T02:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cc48d08de641aa2aab8d461cc9be11b0b2658ea05e87c275ed067d8183ccacc"} {"level":"info","ts":"2026-07-09T02:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e09a1cab0fb8d01f3adf7ca98c3bbf5aef44252f2625ee51479109eb1e34115"} {"level":"info","ts":"2026-07-09T02:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0594aa0ef22d117e86b33b1a8e0dd1c6d428b3599c4a7004923311b7a19da874"} {"level":"info","ts":"2026-07-09T02:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c4ddd9901e741d94c1ce48a513dcf10d2661ecc79bb9bc0bfb67d23d53019a09"} {"level":"info","ts":"2026-07-09T02:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/df5c87191bc86e467cc9a32b592df9f86c61fd0b8022856cd25592fe6dc5d5d8"} {"level":"info","ts":"2026-07-09T02:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e71d08696364c4ad9b729b00e0bc1a8dfe13fc11892fdeffb6641c3d14f220ea"} {"level":"info","ts":"2026-07-09T02:37:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b4963bbd8a678a0629a117cd809b7a8a95ed3717111cbdaa2afaa025d224e46b"} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b"} {"level":"info","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2"} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"} {"level":"debug","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29"} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29"} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29"} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"} {"level":"info","ts":"2026-07-09T02:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"error","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85"} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"} {"level":"debug","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe"} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74"} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"error","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:38:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:38:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"debug","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"debug","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"} {"level":"debug","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe"} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-09T02:39:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-09T02:39:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-09T02:39:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-09T02:39:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b"} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866"} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85"} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74"} {"level":"info","ts":"2026-07-09T02:39:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29"} {"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57010","PortSpecifier":{"PortValue":57010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57010","PortSpecifier":{"PortValue":57010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564756,"nanos":30304109},"http":{"id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a46e5c34-fe93-400e-a7f8-8aa3672ed2c5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42490","PortSpecifier":{"PortValue":42490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad5a3f89-53d7-45e4-a834-669583ded28b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42490","PortSpecifier":{"PortValue":42490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564756,"nanos":70019215},"http":{"id":"ad5a3f89-53d7-45e4-a834-669583ded28b","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad5a3f89-53d7-45e4-a834-669583ded28b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eab38ab-3af7-476c-91fd-188661dae213","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57024","PortSpecifier":{"PortValue":57024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4eab38ab-3af7-476c-91fd-188661dae213","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4eab38ab-3af7-476c-91fd-188661dae213","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57024","PortSpecifier":{"PortValue":57024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564756,"nanos":112754669},"http":{"id":"4eab38ab-3af7-476c-91fd-188661dae213","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy\"}"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","subscription":"e2e-rate-iso-a-e0cfb6","tenant":"e2e-shared-a-7124ed","userId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-e0cfb6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4eab38ab-3af7-476c-91fd-188661dae213","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e0cfb6"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4eab38ab-3af7-476c-91fd-188661dae213","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","selected_subscription":"e2e-rate-iso-a-e0cfb6","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-e0cfb6@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eab38ab-3af7-476c-91fd-188661dae213","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4eab38ab-3af7-476c-91fd-188661dae213","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57034","PortSpecifier":{"PortValue":57034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57034","PortSpecifier":{"PortValue":57034}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564757,"nanos":176682429},"http":{"id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy"} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy\"}"} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","subscription":"e2e-rate-iso-a-e0cfb6","tenant":"e2e-shared-a-7124ed","userId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-e0cfb6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e0cfb6"} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","selected_subscription":"e2e-rate-iso-a-e0cfb6","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-e0cfb6@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b2f2480-dc1b-4a6a-b9d5-5ce67aaf497a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57046","PortSpecifier":{"PortValue":57046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:57046","PortSpecifier":{"PortValue":57046}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564758,"nanos":215799326},"http":{"id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy"} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1E0LYHWptjeNAY1YH_aISnNt7n1Ueazvyvt8FeBt3EvIgJloNKDSdLcWnRwQy\"}"} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","subscription":"e2e-rate-iso-a-e0cfb6","tenant":"e2e-shared-a-7124ed","userId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-e0cfb6\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e0cfb6"} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cb83c0c1-26f5-4a78-b57f-4473a1225011","keyName":"e2e-rate-a-e0cfb6","selected_subscription":"e2e-rate-iso-a-e0cfb6","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-e0cfb6@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e0cfb6","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca5968a3-a13b-48b9-89ce-c6adb05083b9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49804","PortSpecifier":{"PortValue":49804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49804","PortSpecifier":{"PortValue":49804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564771,"nanos":4274945},"http":{"id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a6e217a-b8a0-4d28-b4d1-d3b33b65a5ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33846","PortSpecifier":{"PortValue":33846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48542d81-b057-47b3-baf6-c15ab58d1101","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33846","PortSpecifier":{"PortValue":33846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564771,"nanos":43801956},"http":{"id":"48542d81-b057-47b3-baf6-c15ab58d1101","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"]}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/edfbcaec350f"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cbccf058-a103-418b-a6ac-632b974a9509"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"3fa3bb9b-e0af-4f89-941b-aa87333f151e","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.47:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48542d81-b057-47b3-baf6-c15ab58d1101","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49816","PortSpecifier":{"PortValue":49816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2146ceee-470d-41a4-afa7-de145ac978f8","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49816","PortSpecifier":{"PortValue":49816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564771,"nanos":84549701},"http":{"id":"2146ceee-470d-41a4-afa7-de145ac978f8","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O\"}"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","subscription":"e2e-rate-iso-a-a34034","tenant":"e2e-shared-a-7124ed","userId":"8725a237-e9e5-45f2-a749-ad942ea27a87","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-a34034\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a34034"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","selected_subscription":"e2e-rate-iso-a-a34034","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-a34034@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2146ceee-470d-41a4-afa7-de145ac978f8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49832","PortSpecifier":{"PortValue":49832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49832","PortSpecifier":{"PortValue":49832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564772,"nanos":125322036},"http":{"id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O"} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O\"}"} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","subscription":"e2e-rate-iso-a-a34034","tenant":"e2e-shared-a-7124ed","userId":"8725a237-e9e5-45f2-a749-ad942ea27a87","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-a34034\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a34034"} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","selected_subscription":"e2e-rate-iso-a-a34034","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-a34034@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f5f1125-cd31-4d85-a1cc-9b52f31cbbb9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49840","PortSpecifier":{"PortValue":49840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","method":"POST","path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions","host":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49840","PortSpecifier":{"PortValue":49840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564773,"nanos":161689828},"http":{"id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","method":"POST","headers":{":authority":"e2e-shared-a-7124ed.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xluouCtS6V4zcjbB_d9vfGK1CiFkKRUuvrpyNN6H2IyGlMjEuw4yn0KZ1u6O\"}"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","subscription":"e2e-rate-iso-a-a34034","tenant":"e2e-shared-a-7124ed","userId":"8725a237-e9e5-45f2-a749-ad942ea27a87","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\",\"requestedSubscription\":\"e2e-rate-iso-a-a34034\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7124ed.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a34034"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8725a237-e9e5-45f2-a749-ad942ea27a87","keyName":"e2e-rate-a-a34034","selected_subscription":"e2e-rate-iso-a-a34034","selected_subscription_key":"ai-tenant-e2e-shared-a-7124ed/e2e-rate-iso-a-a34034@ai-tenant-e2e-shared-a-7124ed/rate-test-model-7124ed","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7124ed","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a34034","namespace":"ai-tenant-e2e-shared-a-7124ed","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72611c65-ecb8-4c82-bedb-a231a4b5944c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33862","PortSpecifier":{"PortValue":33862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","method":"POST","path":"/ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad/v1/completions","host":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:33862","PortSpecifier":{"PortValue":33862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.47:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783564773,"nanos":196421652},"http":{"id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","method":"POST","headers":{":authority":"e2e-shared-b-c6afad.apps.8ca14919-d7bc-478b-a401-edfbcaec350f.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-U66qU1dIZMQN7qmW_XzvVW3pWr0zRZ5afejJW4TVQxm50ON9PgrZQkTcnKZo"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-U66qU1dIZMQN7qmW_XzvVW3pWr0zRZ5afejJW4TVQxm50ON9PgrZQkTcnKZo\"}"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"31704743-56cd-42ef-952d-87d5125b94a3","keyName":"e2e-rate-b-a34034","subscription":"e2e-rate-iso-b-a34034","tenant":"e2e-shared-b-c6afad","userId":"31704743-56cd-42ef-952d-87d5125b94a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad\",\"requestedSubscription\":\"e2e-rate-iso-b-a34034\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-c6afad.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-c6afad","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a34034","namespace":"ai-tenant-e2e-shared-b-c6afad","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a34034"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"31704743-56cd-42ef-952d-87d5125b94a3","keyName":"e2e-rate-b-a34034","selected_subscription":"e2e-rate-iso-b-a34034","selected_subscription_key":"ai-tenant-e2e-shared-b-c6afad/e2e-rate-iso-b-a34034@ai-tenant-e2e-shared-b-c6afad/rate-test-model-c6afad","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-c6afad","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a34034","namespace":"ai-tenant-e2e-shared-b-c6afad","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-09T02:39:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d0b8bb3-94f6-445f-a0e1-45691c506d5c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-09T02:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73cad438467b4646d3f5c4c4f5151ef2eb15ae02aca97e0c461e899538a3c0cc"} {"level":"info","ts":"2026-07-09T02:39:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a307ae26f3d36166fecd7a695730602582071b4314ade50c15fb7cb45d946bbe"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fbcd919b5190f15a60d7782e91bb0cb31e812764183309e151e7bae90a12d32"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45a2c88ac179e49ad090c27e9b52e603f32450ed8a14cb8dcbdbe155a91adc85"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/865285e1ed718bc1eff779e08529b058a2519194dd344c6ec921227dbcb3fdba"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f813f93f1f67bf89bb1931547a90dfe2295423dc24e131185ac316bacd5b880"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/467e67a427c99d263e0b6204a6d5e00a95abae390a519faf15cdb0cf07091f67"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e825bca69eb559132cfaf7e4eddd4e948661dee9e3f03e5a0a6920bfdaea7a2"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72409162100743ea812d2827f275505bb10c5a712685d6a149246d93b8e0ed29"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c72668a7ba920f716d46ad08fa0d6e6a748dc3257c805d1b458e20ae06ff6a10"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de257c79bffa80372744f5a574651d8ad22b93439bb856d27b349a5f143dd90"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e03ee91acf356e5fd779e22b992f4b19209b179a61bc8fe8350d0f664a85e74"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22f0816a648380bbee2ab9b620ef140ec989a4d14b0e633c4fe0359330d42390"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ffdf8e0a1e14785dd0081af9f3c9cbaf6454d179bf1365548c52429213e71cbc"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e4fed377bd320e554f5d1065ce99346505d01a98159a9a5ca53d4cfc692fad1d"} {"level":"info","ts":"2026-07-09T02:39:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/696b3ef39180e3b28334daed3340346d7132625f3b0ff4f07739fd2f3cdbc59b"} {"level":"info","ts":"2026-07-09T02:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b8f9f0ea56debb030aaea858ba04487e211246809f9d3a01cb9e022408df7c0e"} {"level":"info","ts":"2026-07-09T02:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/892617b34e14befbbdc03d9897307201ab0a89b0f442093564eb34b03797dd43"} {"level":"info","ts":"2026-07-09T02:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3afd15b8c5c244fc037a808a88a6fac6c2b0a74e80b47fca50931d6fc6e9d8a7"} {"level":"info","ts":"2026-07-09T02:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e6c2f1521b0feb0b1814bd9259188bdffe59ae806a50b697758258fe28bf74c"} {"level":"info","ts":"2026-07-09T02:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c715a6c10d855bd59a3bd553c5c3f752eabbeff3e2f5bb21c90791e8878e1ecb"} {"level":"info","ts":"2026-07-09T02:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2ed2ee4125667803611321c24a7010cd3521c2015e899398dc11b254fb31d866"} {"level":"info","ts":"2026-07-09T02:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7632d0e96534c854b03f0596749fe4ef0ca45bc8a6f6cabfc84af9fdfc95ca99"} {"level":"info","ts":"2026-07-09T02:40:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c824b088763c615971df4fbfd11e6eefe5d15931053ea256350b29dd95e84b1"}